CVE-2021-42877
HighCVSS 7.5Exploitation Probability (EPSS)
Elevated risk74th percentile - higher than 74% of all known CVEs
Summary
A denial of service vulnerability exists in TOTOLINK EX1200T firmware version V4.1.2cu.5215. The flaw is located in the RebootSystem function within the file lib/cste_modules/system, allowing remote system reboot.
Risk Assessment
An attacker can exploit this vulnerability to repeatedly reboot the device, causing network outages and service unavailability.
Recommendation
Update the TOTOLINK EX1200T firmware to the latest available version that fixes this vulnerability. If no update is available, restrict administrative panel access to trusted IP addresses only.
Other vulnerabilities in TOTOLINK EX1200T
See all- CVE-2025-51451Critical
In TOTOLINK EX1200T firmware version 4.1.2cu.5215, a vulnerability allows login bypass by sending a crafted request to formLoginAuth.htm.
- CVE-2021-42875Critical
A remote command injection vulnerability exists in the TOTOLINK EX1200T router firmware version V4.1.2cu.5215. The flaw is located in the setDiagnosisCfg function within the file lib/cste_modules/system.so, which controls the ipDoamin parameter.
- CVE-2021-42872Critical
The TOTOLINK EX1200T device with firmware version V4.1.2cu.5215 is affected by a command injection vulnerability that allows remote arbitrary code execution.
Original NVD description (English source)
TOTOLINK EX1200T V4.1.2cu.5215 contains a denial of service vulnerability in function RebootSystem of the file lib/cste_modules/system which can reboot the system.