CVE-2021-42875

CriticalCVSS 9.8

Published: 02/06/2022(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

High risk

4.16%

90th percentile - higher than 90% of all known CVEs

Summary

A remote command injection vulnerability exists in the TOTOLINK EX1200T router firmware version V4.1.2cu.5215. The flaw is located in the setDiagnosisCfg function within the file lib/cste_modules/system.so, which controls the ipDoamin parameter.

Risk Assessment

An attacker can remotely execute arbitrary system commands on the device, leading to full compromise of the router and potential network takeover.

Recommendation

Immediately update the TOTOLINK EX1200T firmware to the latest available version. If no update is available, restrict management interface access to trusted networks only.

Original NVD description (English source)

TOTOLINK EX1200T V4.1.2cu.5215 contains a remote command injection vulnerability in the function setDiagnosisCfg of the file lib/cste_modules/system.so to control the ipDoamin.