CVE-2021-42875
CriticalCVSS 9.8Exploitation Probability (EPSS)
High risk90th percentile - higher than 90% of all known CVEs
Summary
A remote command injection vulnerability exists in the TOTOLINK EX1200T router firmware version V4.1.2cu.5215. The flaw is located in the setDiagnosisCfg function within the file lib/cste_modules/system.so, which controls the ipDoamin parameter.
Risk Assessment
An attacker can remotely execute arbitrary system commands on the device, leading to full compromise of the router and potential network takeover.
Recommendation
Immediately update the TOTOLINK EX1200T firmware to the latest available version. If no update is available, restrict management interface access to trusted networks only.
Other vulnerabilities in TOTOLINK EX1200T
See all- CVE-2025-51451Critical
In TOTOLINK EX1200T firmware version 4.1.2cu.5215, a vulnerability allows login bypass by sending a crafted request to formLoginAuth.htm.
- CVE-2021-42872Critical
The TOTOLINK EX1200T device with firmware version V4.1.2cu.5215 is affected by a command injection vulnerability that allows remote arbitrary code execution.
- CVE-2021-42877High
A denial of service vulnerability exists in TOTOLINK EX1200T firmware version V4.1.2cu.5215. The flaw is located in the RebootSystem function within the file lib/cste_modules/system, allowing remote system reboot.
Original NVD description (English source)
TOTOLINK EX1200T V4.1.2cu.5215 contains a remote command injection vulnerability in the function setDiagnosisCfg of the file lib/cste_modules/system.so to control the ipDoamin.