Login Request a demo
EX
Product
EX200
by TOTOLINK · last CVE Oct 21, 2026
22
CVEs
0
On KEV
10.0
Max CVSS
2
New 30D
Vulnerabilities22In the news0Timeline
Severity mix
Critical 6High 9Medium 6Low 1
Severity
All severities22Critical6High9Medium6Low1
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add EX200 to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-114383
New
10.0
1%
Oct 21
TOTOLINK EX200 wireless.so cstecgi.cgi setWiFiAclAddConfig stack-based overflow
Affected: 5.2.3c.7200
CVE-2026-114382
New
10.0
1%
Oct 21
TOTOLINK EX200 lan.so cstecgi.cgi setStaticDhcpConfig stack-based overflow
Affected: 5.2.3c.7200
CVE-2024-31810
9.8
1%
May 14
TOTOLINK EX200 V4.0.3c.7646_B20201211 was discovered to contain a hardcoded password for root at /etc/shadow.sample
Affected: 4.0.3c.7646_b20201211
CVE-2024-31807
9.8
1%
Apr 8
TOTOLINK EX200 V4.0.3c.7646_B20201211 was discovered to contain a remote code execution (RCE) vulnerability via the hostTime parameter in the NTPSyncWithHost function
Affected: 4.0.3c.7646_b20201211
CVE-2021-43711
9.8
38%
Jan 4
The downloadFlile.cgi binary file in TOTOLINK EX200 V4.0.3c.7646_B20201211 has a command injection vulnerability when receiving GET parameters
Affected: 4.0.3c.7646_b20201211
CVE-2024-31815
9.1
1%
Apr 8
In TOTOLINK EX200 V4.0.3c.7314_B20191204, an attacker can obtain the configuration file without authorization through /cgi-bin/ExportSettings.sh
Affected: 4.0.3c.7646_b20201211
CVE-2024-7336
8.8
1%
Aug 1
A vulnerability classified as critical was found in TOTOLINK EX200 4.0.3c.7646_B20201211
Affected: 4.0.3c.7646_b20201211
CVE-2024-7335
8.8
1%
Aug 1
A vulnerability classified as critical has been found in TOTOLINK EX200 4.0.3c.7646_B20201211
Affected: 4.0.3c.7646_b20201211
CVE-2024-31814
8.8
8%
Apr 8
TOTOLINK EX200 V4.0.3c.7646_B20201211 allows attackers to bypass login through the Form_Login function
Affected: 4.0.3c.7646_b20201211
CVE-2024-31809
8.8
1%
Apr 8
TOTOLINK EX200 V4.0.3c.7646_B20201211 was discovered to contain a remote code execution (RCE) vulnerability via the FileName parameter in the setUpgradeFW function
Affected: 4.0.3c.7646_b20201211
CVE-2024-31808
8.8
1%
Apr 8
TOTOLINK EX200 V4.0.3c.7646_B20201211 was discovered to contain a remote code execution (RCE) vulnerability via the webWlanIdx parameter in the setWebWlanIdx function
Affected: 4.0.3c.7646_b20201211
CVE-2024-31813
8.4
0%
Apr 8
TOTOLINK EX200 V4.0.3c.7646_B20201211 does not contain an authentication mechanism by default
Affected: 4.0.3c.7646_b20201211
CVE-2024-31811
8.0
1%
Apr 8
TOTOLINK EX200 V4.0.3c.7646_B20201211 was discovered to contain a remote code execution (RCE) vulnerability via the langType parameter in the setLanguageCfg function
Affected: 4.0.3c.7646_b20201211
CVE-2024-31817
7.5
55%
Apr 8
In TOTOLINK EX200 V4.0.3c.7646_B20201211, an attacker can obtain sensitive information without authorization through the function getSysStatusCfg
Affected: 4.0.3c.7646_b20201211
CVE-2024-31816
7.5
3%
Apr 8
In TOTOLINK EX200 V4.0.3c.7646_B20201211, an attacker can obtain sensitive information without authorization through the function getEasyWizardCfg
Affected: 4.0.3c.7646_b20201211
CVE-2024-32326
6.8
1%
Apr 18
TOTOLINK EX200 V4.0.3c.7646_B20201211 contains a Cross-site scripting (XSS) vulnerability through the key parameter in the setWiFiExtenderConfig function
Affected: 4.0.3c.7646_b20201211
CVE-2024-31812
6.5
0%
Apr 8
In TOTOLINK EX200 V4.0.3c.7646_B20201211, an attacker can obtain sensitive information without authorization through the function getWiFiExtenderConfig
Affected: 4.0.3c.7646_b20201211
CVE-2024-31806
6.5
0%
Apr 8
TOTOLINK EX200 V4.0.3c.7646_B20201211 was discovered to contain a Denial-of-Service (DoS) vulnerability in the RebootSystem function which can reboot the system without…
Affected: 4.0.3c.7646_b20201211
CVE-2024-31805
6.5
1%
Apr 8
TOTOLINK EX200 V4.0.3c.7646_B20201211 allows attackers to start the Telnet service without authorization via the telnet_enabled parameter in the setTelnetCfg function
Affected: 4.0.3c.7646_b20201211
CVE-2024-53333
6.3
20%
Nov 21
TOTOLINK EX200 v4.0.3c.7646_B20201211 was found to contain a command insertion vulnerability in the setUssd function
Affected: 4.0.3c.7646_b20201211
CVE-2026-11620
5.3
0%
Jun 9
TOTOLINK EX200 vsftpd vsftpd.conf least privilege violation
Affected: 4.0.3c.7646
CVE-2024-32325
2.4
0%
Apr 18
TOTOLINK EX200 V4.0.3c.7646_B20201211 contains a Cross-site scripting (XSS) vulnerability through the ssid parameter in the setWiFiExtenderConfig function
Affected: 4.0.3c.7646_b20201211
Showing 22