CVE-2025-28038: Totolink EX1200T Firmware

Critical severity, CVSS 9.8. EPSS: 1.2% chance of exploitation in the next 30 days.

TOTOLINK EX1200T V4.1.2cu.5232_B20210713 was found to contain a pre-auth remote command execution vulnerability in the setWebWlanIdx function through the webWlanIdx parameter.

Affected products

• Totolink EX1200T Firmware: version 4.1.2cu.5232_b20210713 only

Published 2025-04-22. Last modified 2026-06-17.