EX
Product
EX200
7
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 4Medium 1Low 1
Watch
Add EX200 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-31810 | 9.8 | May 13 | TOTOLINK EX200 V4.0.3c.7646_B20201211 was discovered to contain a hardcoded password for root at /etc/shadow.sample Affected: 4.0.3c.7646_B20201211 |
| CVE-2024-7336 | 8.8 | Aug 1 | TOTOLINK EX200 cstecgi.cgi loginauth buffer overflow Affected: 4.0.3c.7646_B20201211 |
| CVE-2024-7335 | 8.8 | Aug 1 | TOTOLINK EX200 getSaveConfig buffer overflow Affected: 4.0.3c.7646_B20201211 |
| CVE-2026-15271 | 7.5 | Jul 9 | TOTOLINK EX200 Web boa.conf least privilege violation Affected: 20260906 |
| CVE-2024-31817 | 7.5 | Apr 8 | In TOTOLINK EX200 V4.0.3c.7646_B20201211, an attacker can obtain sensitive information without authorization through the function getSysStatusCfg Affected: v4.0.3c.7646_b20201211 |
| CVE-2024-32326 | 6.8 | Apr 18 | TOTOLINK EX200 V4.0.3c.7646_B20201211 contains a Cross-site scripting (XSS) vulnerability through the key parameter in the setWiFiExtenderConfig function Affected: V4.0.3c.7646_B20201211 |
| CVE-2024-32325 | 2.4 | Apr 18 | TOTOLINK EX200 V4.0.3c.7646_B20201211 contains a Cross-site scripting (XSS) vulnerability through the ssid parameter in the setWiFiExtenderConfig function Affected: All versions, or not specified |
Showing 7