Approved changes feed: RSS · Atom

cpe:2.3:h:totolink:ex200:-:*:*:*:*:*:*:*

part: h version: - update: *

VendorTotolink (fa0129e6-aa24-5784-be77-22d8becdb79b)
ProductEx200 (7a4380f0-31c3-5271-b784-d7dc0a645929)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-7336 not_vulnerable 2026-06-08 06:58:21.919989 TOTOLINK EX200 cstecgi.cgi loginauth buffer overflow
HIGH (8.8)
A vulnerability classified as critical was found in TOTOLINK EX200 4.0.3c.7646_B20201211. Affected by this vulnerability is the function loginauth of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument http_host leads to buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-273259. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2024-08-01T02:31:04.790Z
Updated: 2024-08-01T13:30:01.939Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-7335 not_vulnerable 2026-06-08 06:58:21.919118 TOTOLINK EX200 getSaveConfig buffer overflow
HIGH (8.8)
A vulnerability classified as critical has been found in TOTOLINK EX200 4.0.3c.7646_B20201211. Affected is the function getSaveConfig of the file /cgi-bin/cstecgi.cgi?action=save&setting. The manipulation of the argument http_host leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-273258 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2024-08-01T02:00:06.560Z
Updated: 2024-08-06T19:39:28.167Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-53333 not_vulnerable 2026-06-08 06:54:14.973745 Details available
TOTOLINK EX200 v4.0.3c.7646_B20201211 was found to contain a command insertion vulnerability in the setUssd function. This vulnerability allows an attacker to execute arbitrary commands via the "ussd" parameter.
Published: 2024-11-21T00:00:00.000Z
Updated: 2024-11-25T21:39:57.880Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-32326 not_vulnerable 2026-06-08 06:35:33.047862 Details available
TOTOLINK EX200 V4.0.3c.7646_B20201211 contains a Cross-site scripting (XSS) vulnerability through the key parameter in the setWiFiExtenderConfig function.
Published: 2024-04-18T00:00:00.000Z
Updated: 2024-08-02T02:06:44.093Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-32326 vulnerable 2026-06-08 06:35:33.047692 Details available
TOTOLINK EX200 V4.0.3c.7646_B20201211 contains a Cross-site scripting (XSS) vulnerability through the key parameter in the setWiFiExtenderConfig function.
Published: 2024-04-18T00:00:00.000Z
Updated: 2024-08-02T02:06:44.093Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-32325 not_vulnerable 2026-06-08 06:35:33.047272 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-32325 vulnerable 2026-06-08 06:35:33.047069 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-31817 not_vulnerable 2026-06-08 06:35:32.126407 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-31817 vulnerable 2026-06-08 06:35:32.126318 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-31816 not_vulnerable 2026-06-08 06:35:32.125882 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-31815 not_vulnerable 2026-06-08 06:35:32.125192 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-31814 not_vulnerable 2026-06-08 06:35:32.120445 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-31813 not_vulnerable 2026-06-08 06:35:32.120090 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-31812 not_vulnerable 2026-06-08 06:35:32.119732 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-31811 not_vulnerable 2026-06-08 06:35:32.119237 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-31810 not_vulnerable 2026-06-08 06:35:32.118864 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-31810 vulnerable 2026-06-08 06:35:32.118773 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-31809 not_vulnerable 2026-06-08 06:35:32.118293 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-31808 not_vulnerable 2026-06-08 06:35:32.117826 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-31807 not_vulnerable 2026-06-08 06:35:32.117245 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-31806 not_vulnerable 2026-06-08 06:35:32.116697 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-31805 not_vulnerable 2026-06-08 06:35:32.115973 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-43711 not_vulnerable 2026-06-08 05:36:43.891701 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.