CVE-2021-42884
TOTOLINK EX1200T (v4.1.2cu.5215) contains a remote command-injection in the setDeviceName function of global.so, allowing an attacker to control deviceName. Exploitation originates from a vulnerable component (global.so) and can lead to arbitrary command execution with network access. Connected s...