CVE-2021-42885: Totolink EX1200T Firmware

Critical severity, CVSS 9.8. EPSS: 2.4% chance of exploitation in the next 30 days.

TOTOLINK EX1200T V4.1.2cu.5215 contains a remote command injection vulnerability in function setDeviceMac of the file global.so which can control deviceName to attack.

Affected products

  • Totolink EX1200T Firmware: version 4.1.2cu.5215 only

Published 2022-06-03. Last modified 2026-06-17.