HIGH🇵🇱 Wersja polska

CVE-2024-31809

CVSS 8.8v3.1pub. 2024-04-08upd. 2025-03-18

TOTOLINK EX200 V4.0.3c.7646_B20201211 was discovered to contain a remote code execution (RCE) vulnerability via the FileName parameter in the setUpgradeFW function.

CVSS Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

  • Totolink Ex200

    HW
    Totolink
    wszystkie wersje

  • Totolink Ex200 Firmware

    OS
    Totolink
    4.0.3c.7646_b20201211
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
RCE
CWE
References

Related vulnerabilities

CVE-2024-31810CRITICAL9.8PL ✓ten sam produkt

TOTOLINK EX200: zakodowane na stałe hasło roota w firmware

CVE-2024-31815CRITICAL9.1PL ✓ten sam produkt

TOTOLINK EX200 – nieautoryzowany dostęp do pliku konfiguracyjnego

CVE-2024-31807CRITICAL9.8PL ✓ten sam produkt

RCE w TOTOLINK EX200 poprzez parametr hostTime w funkcji NTPSyncWithHost

CVE-2021-43711CRITICAL9.8ten sam produkt

The downloadFlile.cgi binary file in TOTOLINK EX200 V4.0.3c.7646_B20201211 has a command injection vulnerabili...

CVE-2024-7335HIGH8.7ten sam produkt

A vulnerability classified as critical has been found in TOTOLINK EX200 4.0.3c.7646_B20201211. Affected is the...