Approved changes feed: RSS · Atom

cpe:2.3:o:totolink:ex300_v2_firmware:4.0.3c.140_b20210429:*:*:*:*:*:*:*

part: o version: 4.0.3c.140_b20210429 update: *

VendorTotolink (fa0129e6-aa24-5784-be77-22d8becdb79b)
ProductEx300 V2 Firmware (4ff4f6bd-d1f6-5f4e-96d5-cedfcceb8527)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-25008 vulnerable 2026-06-08 05:41:45.086055 Details available
totolink EX300_v2 V4.0.3c.140_B20210429 and EX1200T V4.1.2cu.5230_B20210706 does not contain an authentication mechanism.
Published: 2022-03-30T22:27:00.000Z
Updated: 2024-08-03T04:29:01.604Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-43664 vulnerable 2026-06-08 05:36:43.665688 Details available
totolink EX300_v2 V4.0.3c.140_B20210429 was discovered to contain a command injection vulnerability via the component process forceugpo.
Published: 2022-03-30T22:53:59.000Z
Updated: 2024-08-04T04:03:08.641Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-43663 vulnerable 2026-06-08 05:36:43.665308 Details available
totolink EX300_v2 V4.0.3c.140_B20210429 was discovered to contain a command injection vulnerability via the component cloudupdate_check.
Published: 2022-03-30T23:40:13.000Z
Updated: 2024-08-04T04:03:08.611Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-43662 vulnerable 2026-06-08 05:36:43.662077 Details available
totolink EX300_v2, ver V4.0.3c.140_B20210429 and A720R ,ver V4.1.5cu.470_B20200911 have an issue which causes uncontrolled resource consumption.
Published: 2022-03-30T23:26:03.000Z
Updated: 2024-08-04T04:03:08.137Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-43661 vulnerable 2026-06-08 05:36:43.660773 Details available
totolink EX300_v2 V4.0.3c.140_B20210429 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the component /home.asp.
Published: 2022-03-30T23:19:19.000Z
Updated: 2024-08-04T04:03:08.303Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.