354 matches found
Default credentials
In TOTOLINK EX1200T V4.1.2cu.5215, an attacker can start telnet without authorization because the default username and password exists in the firmware...
CVE-2021-42893
Vulnerability: TOTOLINK EX1200T (version 4.1.2cu.5215) exposes sensitive data (e.g., wifikey) via getSysStatusCfg without authorization. Affected component: getSysStatusCfg function on the EX1200T firmware. Root cause: information disclosure leading to confidential data exposure. Impact: attacker...
CVE-2021-42893
In TOTOLINK EX1200T V4.1.2cu.5215, an attacker can obtain sensitive information wifikey, etc. without authorization through getSysStatusCfg...
CVE-2021-42892
CVE-2021-42892 affects TOTOLINK EX1200T (firmware V4.1.2cu.5215). The root cause is a default username/password stored in the firmware, allowing an attacker to start Telnet without authorization. Impact: unauthorized Telnet access and potential compromise of the device. No remediation details are...
CVE-2021-42892
In TOTOLINK EX1200T V4.1.2cu.5215, an attacker can start telnet without authorization because the default username and password exists in the firmware...
CVE-2021-42891
In TOTOLINK EX1200T V4.1.2cu.5215, an attacker can obtain sensitive information wifikey, etc. without authorization...
CVE-2021-42891
In TOTOLINK EX1200T V4.1.2cu.5215, an attacker can obtain sensitive information wifikey, etc. without authorization...
CVE-2021-42891
In TOTOLINK EX1200T V4.1.2cu.5215, an attacker can obtain sensitive information wifikey, etc. without authorization...
CVE-2021-42891
CVE-2021-42891 affects TOTOLINK EX1200T V4.1.2cu.5215, enabling an attacker to obtain sensitive information (e.g., wifikey) without authorization. The PT-2022-11736 entry confirms the affected version and notes there is no available information about a fixed newer version at this time. Other conn...
CVE-2021-42889
In TOTOLINK EX1200T V4.1.2cu.5215, an attacker can obtain sensitive information wifikey, wifiname, etc. without authorization...
CVE-2021-42889
In TOTOLINK EX1200T V4.1.2cu.5215, an attacker can obtain sensitive information wifikey, wifiname, etc. without authorization...
CVE-2021-42889
In TOTOLINK EX1200T V4.1.2cu.5215, an attacker can obtain sensitive information wifikey, wifiname, etc. without authorization...
CVE-2021-42890
TOTOLINK EX1200T V4.1.2cu.5215 contains a remote command injection vulnerability in function NTPSyncWithHost of the file system.so which can control hostTime to attack...
CVE-2021-42890
TOTOLINK EX1200T V4.1.2cu.5215 contains a remote command injection vulnerability in function NTPSyncWithHost of the file system.so which can control hostTime to attack...
CVE-2021-42890
TOTOLINK EX1200T V4.1.2cu.5215 contains a remote command injection vulnerability in function NTPSyncWithHost of the file system.so which can control hostTime to attack...
Authorization
In TOTOLINK EX1200T V4.1.2cu.5215, an attacker can obtain sensitive information wifikey, wifiname, etc. without authorization...
CVE-2021-42890
TOTOLINK EX1200T V4.1.2cu.5215 contains a remote command injection vulnerability in function NTPSyncWithHost of the file system.so which can control hostTime to attack...
CVE-2021-42890
CVE-2021-42890 affects TOTOLINK EX1200T V4.1.2cu.5215. The issue is a remote command injection in the NTPSyncWithHost function of the file system.so, enabling an attacker to control hostTime. Several connected sources corroborate a command-injection vulnerability in NTPSyncWithHost; the root caus...