CVE-2021-42875: Totolink EX1200T Firmware

Critical severity, CVSS 9.8. EPSS: 4.4% chance of exploitation in the next 30 days.

TOTOLINK EX1200T V4.1.2cu.5215 contains a remote command injection vulnerability in the function setDiagnosisCfg of the file lib/cste_modules/system.so to control the ipDoamin.

Affected products

  • Totolink EX1200T Firmware: version 4.1.2cu.5215 only

Published 2022-06-02. Last modified 2026-07-09.