Totolink Ex1200t Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Totolink Ex1200t Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (37)

• CVE-2021-42872 — CVSS 9.8 (critical): TOTOLINK EX1200T V4.1.2cu.5215 is affected by a command injection vulnerability that can remotely execute arbitrary code.
• CVE-2021-42875 — CVSS 9.8 (critical): TOTOLINK EX1200T V4.1.2cu.5215 contains a remote command injection vulnerability in the function setDiagnosisCfg of the file…
• CVE-2021-42884 — CVSS 9.8 (critical): TOTOLINK EX1200T V4.1.2cu.5215 contains a remote command injection vulnerability in function setDeviceName of the file global.so which can…
• CVE-2021-42885 — CVSS 9.8 (critical): TOTOLINK EX1200T V4.1.2cu.5215 contains a remote command injection vulnerability in function setDeviceMac of the file global.so which can…
• CVE-2021-42887 — CVSS 9.8 (critical): In TOTOLINK EX1200T V4.1.2cu.5215, an attacker can bypass login by sending a specific request through formLoginAuth.htm.
• CVE-2021-42888 — CVSS 9.8 (critical): TOTOLINK EX1200T V4.1.2cu.5215 contains a remote command injection vulnerability in function setLanguageCfg of the file global.so which can…
• CVE-2021-42890 — CVSS 9.8 (critical): TOTOLINK EX1200T V4.1.2cu.5215 contains a remote command injection vulnerability in function NTPSyncWithHost of the file system.so which…
• CVE-2023-52032 — CVSS 9.8 (critical): TOTOlink EX1200T V4.1.2cu.5232_B20210713 was discovered to contain a remote command execution (RCE) vulnerability via the "main" function.
• CVE-2025-28038 — CVSS 9.8 (critical): TOTOLINK EX1200T V4.1.2cu.5232_B20210713 was found to contain a pre-auth remote command execution vulnerability in the setWebWlanIdx…
• CVE-2025-28039 — CVSS 9.8 (critical): TOTOLINK EX1200T V4.1.2cu.5232_B20210713 was found to contain a pre-auth remote command execution vulnerability in the setUpgradeFW…
• CVE-2025-51451 — CVSS 9.8 (critical): In TOTOLINK EX1200T firmware 4.1.2cu.5215, an attacker can bypass login by sending a specific request through formLoginAuth.htm.
• CVE-2025-5600 — CVSS 9.8 (critical): A vulnerability, which was classified as critical, has been found in TOTOLINK EX1200T 4.1.2cu.5232_B20210713. This issue affects the…
• CVE-2025-6143 — CVSS 8.8 (high): A vulnerability, which was classified as critical, was found in TOTOLINK EX1200T 4.1.2cu.5232_B20210713. Affected is an unknown function of…
• CVE-2025-6144 — CVSS 8.8 (high): A vulnerability has been found in TOTOLINK EX1200T 4.1.2cu.5232_B20210713 and classified as critical. Affected by this vulnerability is an…
• CVE-2025-6302 — CVSS 8.8 (high): A vulnerability, which was classified as critical, was found in TOTOLINK EX1200T 4.1.2cu.5232_B20210713. Affected is the function…
• CVE-2025-6145 — CVSS 8.8 (high): A vulnerability was found in TOTOLINK EX1200T 4.1.2cu.5232_B20210713 and classified as critical. Affected by this issue is some unknown…
• CVE-2025-6336 — CVSS 8.8 (high): A vulnerability was found in TOTOLINK EX1200T 4.1.2cu.5232_B20210713. It has been classified as critical. Affected is an unknown function…
• CVE-2025-6393 — CVSS 8.8 (high): A vulnerability was found in TOTOLINK A702R, A3002R, A3002RU and EX1200T 3.0.0-B20230809.1615/4.0.0-B20230531.1404/4.0.0-B20230721.1521/4.1…
• CVE-2025-6568 — CVSS 8.8 (high): A vulnerability classified as critical has been found in TOTOLINK EX1200T 4.1.2cu.5232_B20210713. Affected is an unknown function of the…
• CVE-2025-5792 — CVSS 8.8 (high): A vulnerability, which was classified as critical, has been found in TOTOLINK EX1200T 4.1.2cu.5232_B20210713. This issue affects some…
• CVE-2025-5793 — CVSS 8.8 (high): A vulnerability, which was classified as critical, was found in TOTOLINK EX1200T 4.1.2cu.5232_B20210713. Affected is an unknown function of…
• CVE-2025-5907 — CVSS 8.8 (high): A vulnerability classified as critical was found in TOTOLINK EX1200T up to 4.1.2cu.5232_B20210713. This vulnerability affects unknown code…
• CVE-2025-5908 — CVSS 8.8 (high): A vulnerability, which was classified as critical, has been found in TOTOLINK EX1200T up to 4.1.2cu.5232_B20210713. This issue affects some…
• CVE-2025-5909 — CVSS 8.8 (high): A vulnerability, which was classified as critical, was found in TOTOLINK EX1200T up to 4.1.2cu.5232_B20210713. Affected is an unknown…
• CVE-2025-5910 — CVSS 8.8 (high): A vulnerability has been found in TOTOLINK EX1200T up to 4.1.2cu.5232_B20210713 and classified as critical. Affected by this vulnerability…
• CVE-2025-5911 — CVSS 8.8 (high): A vulnerability was found in TOTOLINK EX1200T up to 4.1.2cu.5232_B20210713 and classified as critical. Affected by this issue is some…
• CVE-2025-6128 — CVSS 8.8 (high): A vulnerability classified as critical has been found in TOTOLINK EX1200T 4.1.2cu.5232_B20210713. This affects an unknown part of the file…
• CVE-2022-25008 — CVSS 8.8 (high): totolink EX300_v2 V4.0.3c.140_B20210429 and EX1200T V4.1.2cu.5230_B20210706 does not contain an authentication mechanism.
• CVE-2025-6129 — CVSS 8.8 (high): A vulnerability classified as critical was found in TOTOLINK EX1200T 4.1.2cu.5232_B20210713. This vulnerability affects unknown code of the…
• CVE-2025-6130 — CVSS 8.8 (high): A vulnerability, which was classified as critical, has been found in TOTOLINK EX1200T 4.1.2cu.5232_B20210713. This issue affects some…
• CVE-2025-6162 — CVSS 8.8 (high): A vulnerability has been found in TOTOLINK EX1200T 4.1.2cu.5232_B20210713 and classified as critical. Affected by this vulnerability is an…
• CVE-2021-42893 — CVSS 7.5 (high): In TOTOLINK EX1200T V4.1.2cu.5215, an attacker can obtain sensitive information (wifikey, etc.) without authorization through…
• CVE-2021-42877 — CVSS 7.5 (high): TOTOLINK EX1200T V4.1.2cu.5215 contains a denial of service vulnerability in function RebootSystem of the file lib/cste_modules/system…
• CVE-2021-42886 — CVSS 7.5 (high): TOTOLINK EX1200T V4.1.2cu.5215 contains an information disclosure vulnerability where an attacker can get the apmib configuration file…
• CVE-2021-42889 — CVSS 7.5 (high): In TOTOLINK EX1200T V4.1.2cu.5215, an attacker can obtain sensitive information (wifikey, wifiname, etc.) without authorization.
• CVE-2021-42891 — CVSS 7.5 (high): In TOTOLINK EX1200T V4.1.2cu.5215, an attacker can obtain sensitive information (wifikey, etc.) without authorization.
• CVE-2021-42892 — CVSS 4.3 (medium): In TOTOLINK EX1200T V4.1.2cu.5215, an attacker can start telnet without authorization because the default username and password exists in…