Login Request a demo
EX
Product
EX200
by TOTOLINK · last CVE Oct 21, 2026
22
CVEs
0
On KEV
10.0
Max CVSS
2
New 30D
Vulnerabilities22In the news0Timeline
Severity mix
Critical 6High 9Medium 6Low 1
Severity
All severities22Critical6High9Medium6Low1
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add EX200 to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-114383
10.0
1%
Oct 21
TOTOLINK EX200 wireless.so cstecgi.cgi setWiFiAclAddConfig stack-based overflow
Affected: 5.2.3c.7200
CVE-2026-114382
10.0
1%
Oct 21
TOTOLINK EX200 lan.so cstecgi.cgi setStaticDhcpConfig stack-based overflow
Affected: 5.2.3c.7200
CVE-2024-31810
9.8
1%
May 14
TOTOLINK EX200 V4.0.3c.7646_B20201211 was discovered to contain a hardcoded password for root at /etc/shadow.sample
Affected: 4.0.3c.7646_b20201211
CVE-2024-31807
9.8
1%
Apr 8
TOTOLINK EX200 V4.0.3c.7646_B20201211 was discovered to contain a remote code execution (RCE) vulnerability via the hostTime parameter in the NTPSyncWithHost function
Affected: 4.0.3c.7646_b20201211
CVE-2021-43711
9.8
38%
Jan 4
The downloadFlile.cgi binary file in TOTOLINK EX200 V4.0.3c.7646_B20201211 has a command injection vulnerability when receiving GET parameters
Affected: 4.0.3c.7646_b20201211
CVE-2024-31815
9.1
1%
Apr 8
In TOTOLINK EX200 V4.0.3c.7314_B20191204, an attacker can obtain the configuration file without authorization through /cgi-bin/ExportSettings.sh
Affected: 4.0.3c.7646_b20201211
Showing 6