Totolink EX1800T Firmware vulnerabilities

28 CVEs affecting Totolink EX1800T Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-2370, published 2025-03-17.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2025-2094, published 2025-03-07. Critical severity, CVSS 9.8. EPSS: 13% chance of exploitation in the next 30 days. A vulnerability was found in TOTOLINK EX1800T 9.1.0cu.2112_B20220316. It has been rated as critical. Affected by this issue is the function setWiFiExtenderConfig of the file /cgi-bin/cstecgi.cgi. The…
CVE-2025-2097, published 2025-03-07. Critical severity, CVSS 9.8. EPSS: 7.2% chance of exploitation in the next 30 days. A vulnerability, which was classified as critical, has been found in TOTOLINK EX1800T 9.1.0cu.2112_B20220316. This issue affects the function setRptWizardCfg of the file /cgi-bin/cstecgi.cgi. The…
CVE-2024-34257, published 2024-05-08. Critical severity, CVSS 9.8. EPSS: 3.8% chance of exploitation in the next 30 days. TOTOLINK EX1800T V9.1.0cu.2112_B20220316 has a vulnerability in the apcliEncrypType parameter that allows unauthorized execution of arbitrary commands, allowing an attacker to obtain device…
CVE-2025-2096, published 2025-03-07. Critical severity, CVSS 9.8. EPSS: 2.8% chance of exploitation in the next 30 days. A vulnerability classified as critical was found in TOTOLINK EX1800T 9.1.0cu.2112_B20220316. This vulnerability affects the function setRebootScheCfg of the file /cgi-bin/cstecgi.cgi. The…
CVE-2025-2095, published 2025-03-07. Critical severity, CVSS 9.8. EPSS: 2.8% chance of exploitation in the next 30 days. A vulnerability classified as critical has been found in TOTOLINK EX1800T 9.1.0cu.2112_B20220316. This affects the function setDmzCfg of the file /cgi-bin/cstecgi.cgi. The manipulation of the…
CVE-2023-52026, published 2024-01-12. Critical severity, CVSS 9.8. EPSS: 1.6% chance of exploitation in the next 30 days. TOTOlink EX1800T V9.1.0cu.2112_B20220316 was discovered to contain a remote command execution (RCE) vulnerability via the telnet_enabled parameter of the setTelnetCfg interface
CVE-2025-2370, published 2025-03-17. Critical severity, CVSS 9.8. EPSS: 1.2% chance of exploitation in the next 30 days. A vulnerability was found in TOTOLINK EX1800T up to 9.1.0cu.2112_B20220316. It has been declared as critical. Affected by this vulnerability is the function setWiFiExtenderConfig of the file…
CVE-2025-2369, published 2025-03-17. Critical severity, CVSS 9.8. EPSS: 1.2% chance of exploitation in the next 30 days. A vulnerability was found in TOTOLINK EX1800T up to 9.1.0cu.2112_B20220316. It has been classified as critical. Affected is the function setPasswordCfg of the file /cgi-bin/cstecgi.cgi. The…
CVE-2023-51018, published 2023-12-22. Critical severity, CVSS 9.8. EPSS: 1% chance of exploitation in the next 30 days. TOTOlink EX1800T v9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command execution in the ‘opmode’ parameter of the setWiFiApConfig interface of the cstecgi .cgi.
CVE-2023-51016, published 2023-12-22. Critical severity, CVSS 9.8. EPSS: 1% chance of exploitation in the next 30 days. TOTOlink EX1800T v9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command execution in the setRebootScheCfg interface of the cstecgi .cgi.

Latest

CVE-2025-1852, published 2025-03-03. Critical severity, CVSS 9.8. EPSS: 0.9% chance of exploitation in the next 30 days. A vulnerability has been found in Totolink EX1800T 9.1.0cu.2112_B20220316 and classified as critical. This vulnerability affects the function loginAuth of the file /cgi-bin/cstecgi.cgi. The…
CVE-2024-12352, published 2024-12-09. Critical severity, CVSS 9.8. EPSS: 0.8% chance of exploitation in the next 30 days. A vulnerability classified as problematic was found in TOTOLINK EX1800T 9.1.0cu.2112_B20220316. This vulnerability affects the function sub_40662C of the file /cgi-bin/cstecgi.cgi. The manipulation…