TOTOLINK EX200 Command Injection (CVE-2021-43711)

A command injection vulnerability exists in TOTOLINK EX200. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

CVE-2021-43711

creationtimestamp| type| source ---|---|--- 2022-01-04 16:39:23+00:00| seen| https://t.me/cibsecurity/34918 2025-01-15 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2025-01-15 2025-01-24 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2025-01-24...

CVE-2021-43711

The downloadFlile.cgi binary file in TOTOLINK EX200 V4.0.3c.7646B20201211 has a command injection vulnerability when receiving GET parameters. The parameter name can be constructed for unauthenticated command execution...

CVE-2021-43711

The CVE-2021-43711 entry concerns TOTOLINK EX200, specifically the downloadFlile.cgi binary in version V4.0.3c.7646_B20201211. The issue is a command injection vulnerability that occurs when handling GET parameters; the parameter name can be constructed to achieve unauthenticated command executio...