CVE-2025-51451
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk28th percentile - higher than 28% of all known CVEs
Summary
In TOTOLINK EX1200T firmware version 4.1.2cu.5215, a vulnerability allows login bypass by sending a crafted request to formLoginAuth.htm.
Risk Assessment
An attacker can gain unauthorized access to the router's administrative panel, leading to full device and network compromise.
Recommendation
Immediately update the firmware to the latest version or apply the security patch provided by the vendor.
Other vulnerabilities in TOTOLINK EX1200T
See all- CVE-2021-42875Critical
A remote command injection vulnerability exists in the TOTOLINK EX1200T router firmware version V4.1.2cu.5215. The flaw is located in the setDiagnosisCfg function within the file lib/cste_modules/system.so, which controls the ipDoamin parameter.
- CVE-2021-42872Critical
The TOTOLINK EX1200T device with firmware version V4.1.2cu.5215 is affected by a command injection vulnerability that allows remote arbitrary code execution.
- CVE-2021-42877High
A denial of service vulnerability exists in TOTOLINK EX1200T firmware version V4.1.2cu.5215. The flaw is located in the RebootSystem function within the file lib/cste_modules/system, allowing remote system reboot.
Original NVD description (English source)
In TOTOLINK EX1200T firmware 4.1.2cu.5215, an attacker can bypass login by sending a specific request through formLoginAuth.htm.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS