Login Request a demo
EF
Product
Ex1200t Firmware
by Totolink · last CVE Aug 13, 2025
37
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities37In the news0Timeline
Severity mix
Critical 12High 21Medium 4Low 0
Severity
All severities37Critical12High21Medium4Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Ex1200t Firmware to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-51451
9.8
0%
Aug 13
In TOTOLINK EX1200T firmware 4.1.2cu.5215, an attacker can bypass login by sending a specific request through formLoginAuth.htm
Affected: 4.1.2cu.5215
CVE-2025-5600
9.8
1%
Jun 4
A vulnerability, which was classified as critical, has been found in TOTOLINK EX1200T 4.1.2cu.5232_B20210713
Affected: 4.1.2cu.5232_b20210713
CVE-2025-28039
9.8
1%
Apr 22
TOTOLINK EX1200T V4.1.2cu.5232_B20210713 was found to contain a pre-auth remote command execution vulnerability in the setUpgradeFW function through the FileName parameter
Affected: 4.1.2cu.5232_b20210713
CVE-2025-28038
9.8
1%
Apr 22
TOTOLINK EX1200T V4.1.2cu.5232_B20210713 was found to contain a pre-auth remote command execution vulnerability in the setWebWlanIdx function through the webWlanIdx parameter
Affected: 4.1.2cu.5232_b20210713
CVE-2023-52032
9.8
2%
Jan 11
TOTOlink EX1200T V4.1.2cu.5232_B20210713 was discovered to contain a remote command execution (RCE) vulnerability via the "main" function
Affected: 4.1.2cu.5232_b20210713
CVE-2021-42890
9.8
2%
Jun 3
TOTOLINK EX1200T V4.1.2cu.5215 contains a remote command injection vulnerability in function NTPSyncWithHost of the file system.so which can control hostTime to attack
Affected: 4.1.2cu.5215
CVE-2021-42888
9.8
2%
Jun 3
TOTOLINK EX1200T V4.1.2cu.5215 contains a remote command injection vulnerability in function setLanguageCfg of the file global.so which can control langType to attack
Affected: 4.1.2cu.5215
CVE-2021-42887
9.8
44%
Jun 3
In TOTOLINK EX1200T V4.1.2cu.5215, an attacker can bypass login by sending a specific request through formLoginAuth.htm
Affected: 4.1.2cu.5215
CVE-2021-42885
9.8
2%
Jun 3
TOTOLINK EX1200T V4.1.2cu.5215 contains a remote command injection vulnerability in function setDeviceMac of the file global.so which can control deviceName to attack
Affected: 4.1.2cu.5215
CVE-2021-42884
9.8
2%
Jun 3
TOTOLINK EX1200T V4.1.2cu.5215 contains a remote command injection vulnerability in function setDeviceName of the file global.so which can control thedeviceName to attack
Affected: 4.1.2cu.5215
CVE-2021-42875
9.8
4%
Jun 2
TOTOLINK EX1200T V4.1.2cu.5215 contains a remote command injection vulnerability in the function setDiagnosisCfg of the file lib/cste_modules/system.so to control the ipDoamin
Affected: 4.1.2cu.5215
CVE-2021-42872
9.8
6%
Jun 2
TOTOLINK EX1200T V4.1.2cu.5215 is affected by a command injection vulnerability that can remotely execute arbitrary code
Affected: 4.1.2cu.5215
Showing 12