CVE-2021-42888

2022-06-0313:51:17

mitre

www.cve.org

totolink ex1200t v4.1.2cu.5215

remote command injection

setlanguagecfg

global.so

langtype attack

AI Score

9.8

Confidence

High

EPSS

0.003

Percentile

68.7%

JSON

TOTOLINK EX1200T V4.1.2cu.5215 contains a remote command injection vulnerability in function setLanguageCfg of the file global.so which can control langType to attack.

References

github.com/p1Kk/vuln/blob/main/totolink_ex1200t_langtype_rce.md