Approved changes feed: RSS · Atom

cpe:2.3:o:totolink:ex300_v2_firmware:4.0.3c.7484:*:*:*:*:*:*:*

part: o version: 4.0.3c.7484 update: *

VendorTotolink (fa0129e6-aa24-5784-be77-22d8becdb79b)
ProductEx300 V2 Firmware (4ff4f6bd-d1f6-5f4e-96d5-cedfcceb8527)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-32449 vulnerable 2026-06-08 05:44:43.336285 Details available
TOTOLINK EX300_V2 V4.0.3c.7484 was discovered to contain a command injection vulnerability via the langType parameter in the setLanguageCfg function. This vulnerability is exploitable via a crafted MQTT data packet.
Published: 2022-07-07T00:00:00.000Z
Updated: 2024-08-03T07:39:51.043Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.