CVE-2021-43664

totolink EX300v2 V4.0.3c.140B20210429 was discovered to contain a command injection vulnerability via the component process forceugpo...

CVE-2021-43664

totolink EX300v2 V4.0.3c.140B20210429 was discovered to contain a command injection vulnerability via the component process forceugpo...

Command injection

totolink EX300v2 V4.0.3c.140B20210429 was discovered to contain a command injection vulnerability via the component process forceugpo...

CVE-2021-43664

totolink EX300v2 V4.0.3c.140B20210429 was discovered to contain a command injection vulnerability via the component process forceugpo...

CVE-2021-43664

The vulnerability CVE-2021-43664 affects Totolink EX300_v2 firmware V4.0.3c.140_B20210429, where a command-injection flaw exists in the component process forceugpo. This can enable an attacker to remotely execute code as root, potentially via a Man-in-the-Middle attack (as cited in CNVD/CNNVD sou...