GCVE - cpe:2.3:h:totolink:ex300_v2:-:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:h:totolink:ex300_v2:-:*:*:*:*:*:*:*

part: h version: - update: *

Vendor	Totolink (`fa0129e6-aa24-5784-be77-22d8becdb79b`)
Product	Ex300 V2 (`1157726e-5eef-5c4b-8250-a7e176113345`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2022-32449`	not_vulnerable	2026-06-08 05:44:43.337300	Details available TOTOLINK EX300_V2 V4.0.3c.7484 was discovered to contain a command injection vulnerability via the langType parameter in the setLanguageCfg function. This vulnerability is exploitable via a crafted MQTT data packet. Published: 2022-07-07T00:00:00.000Z Updated: 2024-08-03T07:39:51.043Z Open on db.gcve.eu Reference links https://github.com/winmt/CVE/blob/main/TOTOLINK%20EX300_V2/README.md https://github.com/winmt/my-vuls/tree/main/TOTOLINK%20EX300_V2	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-25008`	not_vulnerable	2026-06-08 05:41:45.086651	Details available totolink EX300_v2 V4.0.3c.140_B20210429 and EX1200T V4.1.2cu.5230_B20210706 does not contain an authentication mechanism. Published: 2022-03-30T22:27:00.000Z Updated: 2024-08-03T04:29:01.604Z Open on db.gcve.eu Reference links https://github.com/chibataiki/iot-vuls/blob/main/totolink/missing-authentication.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-43664`	not_vulnerable	2026-06-08 05:36:43.665712	Details available totolink EX300_v2 V4.0.3c.140_B20210429 was discovered to contain a command injection vulnerability via the component process forceugpo. Published: 2022-03-30T22:53:59.000Z Updated: 2024-08-04T04:03:08.641Z Open on db.gcve.eu Reference links https://github.com/chibataiki/iot-vuls/blob/main/totolink/command-injection2.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-43663`	not_vulnerable	2026-06-08 05:36:43.665372	Details available totolink EX300_v2 V4.0.3c.140_B20210429 was discovered to contain a command injection vulnerability via the component cloudupdate_check. Published: 2022-03-30T23:40:13.000Z Updated: 2024-08-04T04:03:08.611Z Open on db.gcve.eu Reference links https://github.com/chibataiki/iot-vuls/blob/main/totolink/command-injection1.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-43662`	not_vulnerable	2026-06-08 05:36:43.662103	Details available totolink EX300_v2, ver V4.0.3c.140_B20210429 and A720R ,ver V4.1.5cu.470_B20200911 have an issue which causes uncontrolled resource consumption. Published: 2022-03-30T23:26:03.000Z Updated: 2024-08-04T04:03:08.137Z Open on db.gcve.eu Reference links https://github.com/chibataiki/iot-vuls/blob/main/totolink/dos.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-43661`	not_vulnerable	2026-06-08 05:36:43.661534	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.