Approved changes feed: RSS · Atom

cpe:2.3:o:totolink:ex1200t_firmware:4.1.2cu.5215:*:*:*:*:*:*:*

part: o version: 4.1.2cu.5215 update: *

VendorTotolink (fa0129e6-aa24-5784-be77-22d8becdb79b)
ProductEx1200T Firmware (5e103c37-60cf-5bef-ab22-d73737295b63)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-51451 vulnerable 2026-06-03 15:01:58.803209 Details available
In TOTOLINK EX1200T firmware 4.1.2cu.5215, an attacker can bypass login by sending a specific request through formLoginAuth.htm.
Published: 2025-08-13T00:00:00.000Z
Updated: 2025-08-14T14:53:51.892Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-42893 vulnerable 2026-06-03 14:45:27.881192 Details available
In TOTOLINK EX1200T V4.1.2cu.5215, an attacker can obtain sensitive information (wifikey, etc.) without authorization through getSysStatusCfg.
Published: 2022-06-03T17:12:36.000Z
Updated: 2024-08-04T03:47:11.781Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-42892 vulnerable 2026-06-03 14:45:27.880891 Details available
In TOTOLINK EX1200T V4.1.2cu.5215, an attacker can start telnet without authorization because the default username and password exists in the firmware.
Published: 2022-06-03T16:53:53.000Z
Updated: 2024-08-04T03:47:11.783Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-42891 vulnerable 2026-06-03 14:45:27.880605 Details available
In TOTOLINK EX1200T V4.1.2cu.5215, an attacker can obtain sensitive information (wifikey, etc.) without authorization.
Published: 2022-06-03T15:17:08.000Z
Updated: 2024-08-04T03:47:12.346Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-42890 vulnerable 2026-06-03 14:45:27.880323 Details available
TOTOLINK EX1200T V4.1.2cu.5215 contains a remote command injection vulnerability in function NTPSyncWithHost of the file system.so which can control hostTime to attack.
Published: 2022-06-03T14:57:19.000Z
Updated: 2024-08-04T03:47:12.393Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-42889 vulnerable 2026-06-03 14:45:27.880035 Details available
In TOTOLINK EX1200T V4.1.2cu.5215, an attacker can obtain sensitive information (wifikey, wifiname, etc.) without authorization.
Published: 2022-06-03T14:08:41.000Z
Updated: 2024-08-04T03:47:11.788Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-42888 vulnerable 2026-06-03 14:45:27.879746 Details available
TOTOLINK EX1200T V4.1.2cu.5215 contains a remote command injection vulnerability in function setLanguageCfg of the file global.so which can control langType to attack.
Published: 2022-06-03T13:51:17.000Z
Updated: 2024-08-04T03:47:12.329Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-42887 vulnerable 2026-06-03 14:45:27.879454 Details available
In TOTOLINK EX1200T V4.1.2cu.5215, an attacker can bypass login by sending a specific request through formLoginAuth.htm.
Published: 2022-06-03T11:40:42.000Z
Updated: 2024-08-04T03:47:11.756Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-42886 vulnerable 2026-06-03 14:45:27.879165 Details available
TOTOLINK EX1200T V4.1.2cu.5215 contains an information disclosure vulnerability where an attacker can get the apmib configuration file without authorization, and usernames and passwords can be found in the decoded file.
Published: 2022-06-03T11:13:38.000Z
Updated: 2024-08-04T03:47:11.755Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-42885 vulnerable 2026-06-03 14:45:27.878871 Details available
TOTOLINK EX1200T V4.1.2cu.5215 contains a remote command injection vulnerability in function setDeviceMac of the file global.so which can control deviceName to attack.
Published: 2022-06-03T10:50:27.000Z
Updated: 2024-08-04T03:47:11.771Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-42884 vulnerable 2026-06-03 14:45:27.878575 Details available
TOTOLINK EX1200T V4.1.2cu.5215 contains a remote command injection vulnerability in function setDeviceName of the file global.so which can control thedeviceName to attack.
Published: 2022-06-03T10:35:20.000Z
Updated: 2024-08-04T03:47:11.784Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-42877 vulnerable 2026-06-03 14:45:27.878266 Details available
TOTOLINK EX1200T V4.1.2cu.5215 contains a denial of service vulnerability in function RebootSystem of the file lib/cste_modules/system which can reboot the system.
Published: 2022-06-02T19:18:46.000Z
Updated: 2024-08-04T03:38:50.212Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-42875 vulnerable 2026-06-03 14:45:27.877893 Details available
TOTOLINK EX1200T V4.1.2cu.5215 contains a remote command injection vulnerability in the function setDiagnosisCfg of the file lib/cste_modules/system.so to control the ipDoamin.
Published: 2022-06-02T18:52:02.000Z
Updated: 2024-08-04T03:38:50.222Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-42872 vulnerable 2026-06-03 14:45:27.876850 Details available
TOTOLINK EX1200T V4.1.2cu.5215 is affected by a command injection vulnerability that can remotely execute arbitrary code.
Published: 2022-05-31T23:15:28.000Z
Updated: 2024-08-04T03:38:50.251Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.