Totolink EX1200L Firmware vulnerabilities

11 CVEs affecting Totolink EX1200L Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-7909, published 2024-08-18.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2023-4411, published 2023-08-18. Critical severity, CVSS 9.8. EPSS: 5.2% chance of exploitation in the next 30 days. A vulnerability has been found in TOTOLINK EX1200L EN_V9.3.5u.6146_B20201023 and classified as critical. This vulnerability affects the function setTracerouteCfg. The manipulation leads to os command…
CVE-2023-4412, published 2023-08-18. Critical severity, CVSS 9.8. EPSS: 3.7% chance of exploitation in the next 30 days. A vulnerability was found in TOTOLINK EX1200L EN_V9.3.5u.6146_B20201023 and classified as critical. This issue affects the function setWanCfg. The manipulation leads to os command injection. The…
CVE-2023-4410, published 2023-08-18. Critical severity, CVSS 9.8. EPSS: 3.7% chance of exploitation in the next 30 days. A vulnerability, which was classified as critical, was found in TOTOLINK EX1200L EN_V9.3.5u.6146_B20201023. This affects the function setDiagnosisCfg. The manipulation leads to os command injection.…
CVE-2024-7909, published 2024-08-18. Critical severity, CVSS 9.8. EPSS: 1.5% chance of exploitation in the next 30 days. A vulnerability has been found in TOTOLINK EX1200L 9.3.5u.6146_B20201023 and classified as critical. Affected by this vulnerability is the function setLanguageCfg of the file…
CVE-2024-7908, published 2024-08-18. Critical severity, CVSS 9.8. EPSS: 1.5% chance of exploitation in the next 30 days. A vulnerability, which was classified as critical, was found in TOTOLINK EX1200L 9.3.5u.6146_B20201023. Affected is the function setDefResponse of the file /www/cgi-bin/cstecgi.cgi. The manipulation…
CVE-2023-51035, published 2023-12-22. Critical severity, CVSS 9.8. EPSS: 1.3% chance of exploitation in the next 30 days. TOTOLINK EX1200L V9.3.5u.6146_B20201023 is vulnerable to arbitrary command execution on the cstecgi.cgi NTPSyncWithHost interface.
CVE-2024-7338, published 2024-08-01. High severity, CVSS 8.8. EPSS: 1.2% chance of exploitation in the next 30 days. A vulnerability, which was classified as critical, was found in TOTOLINK EX1200L 9.3.5u.6146_B20201023. This affects the function setParentalRules of the file /cgi-bin/cstecgi.cgi. The manipulation…
CVE-2024-7337, published 2024-08-01. High severity, CVSS 8.8. EPSS: 1.2% chance of exploitation in the next 30 days. A vulnerability, which was classified as critical, has been found in TOTOLINK EX1200L 9.3.5u.6146_B20201023. Affected by this issue is the function loginauth of the file /cgi-bin/cstecgi.cgi. The…
CVE-2024-7334, published 2024-08-01. High severity, CVSS 8.8. EPSS: 1.2% chance of exploitation in the next 30 days. A vulnerability was found in TOTOLINK EX1200L 9.3.5u.6146_B20201023. It has been rated as critical. This issue affects the function UploadCustomModule of the file /cgi-bin/cstecgi.cgi. The…
CVE-2023-51034, published 2023-12-22. Critical severity, CVSS 9.8. EPSS: 1.1% chance of exploitation in the next 30 days. TOTOlink EX1200L V9.3.5u.6146_B20201023 is vulnerable to arbitrary command execution via the cstecgi.cgi UploadFirmwareFile interface.

Latest

CVE-2023-51033, published 2023-12-22. Critical severity, CVSS 9.8. EPSS: 1% chance of exploitation in the next 30 days. TOTOlink EX1200L V9.3.5u.6146_B20201023 is vulnerable to arbitrary command execution via the cstecgi.cgi setOpModeCfg interface.