Ex1800t Firmware vulnerabilities | LiveThreat CVE Feed

Product

Ex1800t Firmware

by Totolink · last CVE Mar 17, 2025

CVEs

On KEV

9.8

Max CVSS

New 30D

Vulnerabilities28 In the news0 Timeline

Severity mix

Critical 28High 0Medium 0Low 0

Severity

All severities28 Critical28 High0 Medium0 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Ex1800t Firmware to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2025-2370	9.8	1%	Mar 17	A vulnerability was found in TOTOLINK EX1800T up to 9.1.0cu.2112_B20220316 Affected: through 9.1.0cu.2112_b20220316
CVE-2025-2369	9.8	1%	Mar 17	A vulnerability was found in TOTOLINK EX1800T up to 9.1.0cu.2112_B20220316 Affected: through 9.1.0cu.2112_b20220316
CVE-2025-2097	9.8	7%	Mar 7	A vulnerability, which was classified as critical, has been found in TOTOLINK EX1800T 9.1.0cu.2112_B20220316 Affected: 9.1.0cu.2112_b20220316
CVE-2025-2096	9.8	3%	Mar 7	A vulnerability classified as critical was found in TOTOLINK EX1800T 9.1.0cu.2112_B20220316 Affected: 9.1.0cu.2112_b20220316
CVE-2025-2095	9.8	3%	Mar 7	A vulnerability classified as critical has been found in TOTOLINK EX1800T 9.1.0cu.2112_B20220316 Affected: 9.1.0cu.2112_b20220316
CVE-2025-2094	9.8	13%	Mar 7	A vulnerability was found in TOTOLINK EX1800T 9.1.0cu.2112_B20220316 Affected: 9.1.0cu.2112_b20220316
CVE-2025-1852	9.8	1%	Mar 3	A vulnerability has been found in Totolink EX1800T 9.1.0cu.2112_B20220316 and classified as critical Affected: 9.1.0cu.2112_b20220316
CVE-2024-12352	9.8	1%	Dec 9	A vulnerability classified as problematic was found in TOTOLINK EX1800T 9.1.0cu.2112_B20220316 Affected: 9.1.0cu.2112_b20220316
CVE-2024-34257	9.8	4%	May 8	TOTOLINK EX1800T V9.1.0cu.2112_B20220316 has a vulnerability in the apcliEncrypType parameter that allows unauthorized execution of arbitrary commands, allowing an attacker to… Affected: 9.1.0cu.2112_b20220316
CVE-2023-52026	9.8	2%	Jan 12	TOTOlink EX1800T V9.1.0cu.2112_B20220316 was discovered to contain a remote command execution (RCE) vulnerability via the telnet_enabled parameter of the setTelnetCfg interface Affected: 9.1.0cu.2112_b20220316
CVE-2023-51022	9.8	1%	Dec 22	TOTOlink EX1800T v9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command execution in the ‘langFlag’ parameter of the setLanguageCfg interface of the cstecgi .cgi Affected: 9.1.0cu.2112_b20220316
CVE-2023-51021	9.8	1%	Dec 22	TOTOlink EX1800T v9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command execution in the ‘merge’ parameter of the setRptWizardCfg interface of the cstecgi .cgi Affected: 9.1.0cu.2112_b20220316
CVE-2023-51020	9.8	1%	Dec 22	TOTOlink EX1800T v9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command execution in the ‘langType’ parameter of the setLanguageCfg interface of the cstecgi .cgi Affected: 9.1.0cu.2112_b20220316
CVE-2023-51019	9.8	1%	Dec 22	TOTOlink EX1800T v9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command execution in the ‘key5g’ parameter of the setWiFiExtenderConfig interface of the cstecgi… Affected: 9.1.0cu.2112_b20220316
CVE-2023-51018	9.8	1%	Dec 22	TOTOlink EX1800T v9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command execution in the ‘opmode’ parameter of the setWiFiApConfig interface of the cstecgi .cgi Affected: 9.1.0cu.2112_b20220316
CVE-2023-51017	9.8	1%	Dec 22	TOTOlink EX1800T v9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command execution in the lanIp parameter’ of the setLanConfig interface of the cstecgi .cgi Affected: 9.1.0cu.2112_b20220316
CVE-2023-51016	9.8	1%	Dec 22	TOTOlink EX1800T v9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command execution in the setRebootScheCfg interface of the cstecgi .cgi Affected: 9.1.0cu.2112_b20220316
CVE-2023-51015	9.8	1%	Dec 22	TOTOLINX EX1800T v9.1.0cu.2112_B20220316 is vulnerable to arbitrary command execution in the ‘enable parameter’ of the setDmzCfg interface of the cstecgi .cgi Affected: 9.1.0cu.2112_b20220316
CVE-2023-51014	9.8	1%	Dec 22	TOTOLINK EX1800T V9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command execution in the lanSecDns parameter’ of the setLanConfig interface of the cstecgi .cgi Affected: 9.1.0cu.2112_b20220316
CVE-2023-51013	9.8	1%	Dec 22	TOTOlink EX1800T v9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command execution in the lanNetmask parameter’ of the setLanConfig interface of the cstecgi .cgi Affected: 9.1.0cu.2112_b20220316
CVE-2023-51012	9.8	1%	Dec 22	TOTOlink EX1800T v9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command execution in the lanGateway parameter’ of the setLanConfig interface of the cstecgi .cgi Affected: 9.1.0cu.2112_b20220316
CVE-2023-51011	9.8	1%	Dec 22	TOTOlink EX1800T v9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command execution in the lanPriDns parameter’ of the setLanConfig interface of the cstecgi .cgi Affected: 9.1.0cu.2112_b20220316
CVE-2023-51028	9.8	1%	Dec 22	TOTOLINK EX1800T 9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command execution in the apcliChannel parameter of the setWiFiExtenderConfig interface of the… Affected: 9.1.0cu.2112_b20220316
CVE-2023-51027	9.8	1%	Dec 22	TOTOlink EX1800T V9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command execution in the ‘apcliAuthMode’ parameter of the setWiFiExtenderConfig interface of the… Affected: 9.1.0cu.2112_b20220316
CVE-2023-51026	9.8	1%	Dec 22	TOTOlink EX1800T V9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command execution in the ‘hour’ parameter of the setRebootScheCfg interface of the cstecgi .cgi Affected: 9.1.0cu.2112_b20220316
CVE-2023-51025	9.8	1%	Dec 22	TOTOlink EX1800T V9.1.0cu.2112_B20220316 is vulnerable to an unauthorized arbitrary command execution in the ‘admuser’ parameter of the setPasswordCfg interface of the cstecgi… Affected: 9.1.0cu.2112_b20220316
CVE-2023-51024	9.8	1%	Dec 22	TOTOlink EX1800T v9.1.0cu.2112_B20220316 is vulnerable to unauthorized arbitrary command execution in the ‘tz’ parameter of the setNtpCfg interface of the cstecgi .cgi Affected: 9.1.0cu.2112_b20220316
CVE-2023-51023	9.8	1%	Dec 22	TOTOlink EX1800T v9.1.0cu.2112_B20220316 is vulnerable to arbitrary command execution in the ‘host_time’ parameter of the NTPSyncWithHost interface of the cstecgi .cgi Affected: 9.1.0cu.2112_b20220316