Design/Logic Flaw

2023-12-2219:15:00

PRIOn knowledge base

www.prio-n.com

totolink

ex1200l

vulnerability

arbitrary command execution

cstecgi.cgi

ntpsyncwithhost

7.5 High

AI Score

Confidence

Low

0.004 Low

EPSS

Percentile

72.1%

TOTOLINK EX1200L V9.3.5u.6146_B20201023 is vulnerable to arbitrary command execution on the cstecgi.cgi NTPSyncWithHost interface.

CPENameOperatorVersion
ex1200l_firmwareeq9.3.5u.6146-b20201023

CPE	Name	Operator	Version
	ex1200l_firmware	eq	9.3.5u.6146-b20201023

References

815yang.github.io/2023/12/12/ex1200l/totolink_ex1200L_NTPSyncWithHost/