critical9.8
CVE-2021-43711
The downloadFlile.cgi binary file in TOTOLINK EX200 V4.0.3c.7646_B20201211 has a command injection vulnerability when receiving GET parameters.
Impact
The downloadFlile.cgi binary file in TOTOLINK EX200 V4.0.3c.7646_B20201211 has a command injection vulnerability when receiving GET parameters. The parameter name can be constructed for unauthenticated command execution.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Totolink | Ex200 Firmware | Version 4.0.3c.7646_b20201211 |