Approved changes feed: RSS · Atom

cpe:2.3:o:totolink:ex1200t_firmware:4.1.2cu.5215:*:*:*:*:*:*:*

part: o version: 4.1.2cu.5215 update: *

VendorTotolink (fa0129e6-aa24-5784-be77-22d8becdb79b)
ProductEx1200T Firmware (5e103c37-60cf-5bef-ab22-d73737295b63)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-51451 vulnerable 2026-06-08 07:31:11.191993 Details available
In TOTOLINK EX1200T firmware 4.1.2cu.5215, an attacker can bypass login by sending a specific request through formLoginAuth.htm.
Published: 2025-08-13T00:00:00.000Z
Updated: 2026-07-05T01:09:13.572Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-42893 vulnerable 2026-06-08 05:35:23.019921 Details available
In TOTOLINK EX1200T V4.1.2cu.5215, an attacker can obtain sensitive information (wifikey, etc.) without authorization through getSysStatusCfg.
Published: 2022-06-03T17:12:36.000Z
Updated: 2024-08-04T03:47:11.781Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-42892 vulnerable 2026-06-08 05:35:23.019622 Details available
In TOTOLINK EX1200T V4.1.2cu.5215, an attacker can start telnet without authorization because the default username and password exists in the firmware.
Published: 2022-06-03T16:53:53.000Z
Updated: 2024-08-04T03:47:11.783Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-42891 vulnerable 2026-06-08 05:35:23.019234 Details available
In TOTOLINK EX1200T V4.1.2cu.5215, an attacker can obtain sensitive information (wifikey, etc.) without authorization.
Published: 2022-06-03T15:17:08.000Z
Updated: 2024-08-04T03:47:12.346Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-42890 vulnerable 2026-06-08 05:35:23.018930 Details available
TOTOLINK EX1200T V4.1.2cu.5215 contains a remote command injection vulnerability in function NTPSyncWithHost of the file system.so which can control hostTime to attack.
Published: 2022-06-03T14:57:19.000Z
Updated: 2024-08-04T03:47:12.393Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-42889 vulnerable 2026-06-08 05:35:23.018521 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-42888 vulnerable 2026-06-08 05:35:23.018096 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-42887 vulnerable 2026-06-08 05:35:23.017683 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-42886 vulnerable 2026-06-08 05:35:23.017386 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-42885 vulnerable 2026-06-08 05:35:23.017055 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-42884 vulnerable 2026-06-08 05:35:23.016624 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-42877 vulnerable 2026-06-08 05:35:23.016317 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-42875 vulnerable 2026-06-08 05:35:23.015948 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-42872 vulnerable 2026-06-08 05:35:23.014598 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.