Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 6

Export CSV
CVE-2022-32449

TOTOLINK EX300_V2 V4.0.3c.7484 was discovered to contain a command injection vulnerability via the langType parameter in the setLanguageCfg function. This vulnerability is exploitable via a crafted MQTT data packet.

CVSS 3.1 · 9.8 Critical EPSS 19.4% KEV · Not listed
Vendors
Totolink
Products
Ex300 V2 Ex300 V2 Firmware
CVE-2021-43664

totolink EX300_v2 V4.0.3c.140_B20210429 was discovered to contain a command injection vulnerability via the component process forceugpo.

CVSS 3.1 · 8.1 High EPSS 1.7% KEV · Not listed
Vendors
Totolink
Products
Ex300 V2 Ex300 V2 Firmware
CVE-2021-43663

totolink EX300_v2 V4.0.3c.140_B20210429 was discovered to contain a command injection vulnerability via the component cloudupdate_check.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Totolink
Products
Ex300 V2 Ex300 V2 Firmware
CVE-2021-43662

totolink EX300_v2, ver V4.0.3c.140_B20210429 and A720R ,ver V4.1.5cu.470_B20200911 have an issue which causes uncontrolled resource consumption.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Totolink
Products
A720r A720r Firmware Ex300 V2 and 1 more
CVE-2021-43661

totolink EX300_v2 V4.0.3c.140_B20210429 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the component /home.asp.

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Totolink
Products
Ex300 V2 Ex300 V2 Firmware