CVE-2021-42872

CriticalCVSS 9.8

Published: 02/06/2022(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Very high risk

6.76%

93th percentile - higher than 93% of all known CVEs

Summary

The TOTOLINK EX1200T device with firmware version V4.1.2cu.5215 is affected by a command injection vulnerability that allows remote arbitrary code execution.

Risk Assessment

An attacker can remotely take control of the device, leading to compromise of network confidentiality, integrity, and availability.

Recommendation

Immediately update the TOTOLINK EX1200T firmware to the latest available version that fixes this vulnerability.

Original NVD description (English source)

TOTOLINK EX1200T V4.1.2cu.5215 is affected by a command injection vulnerability that can remotely execute arbitrary code.