CVE-2021-42872
CriticalCVSS 9.8Exploitation Probability (EPSS)
Very high risk93th percentile - higher than 93% of all known CVEs
Summary
The TOTOLINK EX1200T device with firmware version V4.1.2cu.5215 is affected by a command injection vulnerability that allows remote arbitrary code execution.
Risk Assessment
An attacker can remotely take control of the device, leading to compromise of network confidentiality, integrity, and availability.
Recommendation
Immediately update the TOTOLINK EX1200T firmware to the latest available version that fixes this vulnerability.
Other vulnerabilities in TOTOLINK EX1200T
See all- CVE-2025-51451Critical
In TOTOLINK EX1200T firmware version 4.1.2cu.5215, a vulnerability allows login bypass by sending a crafted request to formLoginAuth.htm.
- CVE-2021-42875Critical
A remote command injection vulnerability exists in the TOTOLINK EX1200T router firmware version V4.1.2cu.5215. The flaw is located in the setDiagnosisCfg function within the file lib/cste_modules/system.so, which controls the ipDoamin parameter.
- CVE-2021-42877High
A denial of service vulnerability exists in TOTOLINK EX1200T firmware version V4.1.2cu.5215. The flaw is located in the RebootSystem function within the file lib/cste_modules/system, allowing remote system reboot.
Original NVD description (English source)
TOTOLINK EX1200T V4.1.2cu.5215 is affected by a command injection vulnerability that can remotely execute arbitrary code.