TOTOLINK EX200 Router Unauthorized Access

The vulnerability of the getWiFiExtenderConfig function in TOTOLINK EX200 router microprogramming software relates to the disclosure of information. Exploiting this vulnerability may allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

TOTOLINK EX200 getWiFiExtenderConfig Method Information Disclosure Vulnerability

TOTOLINK EX200 is a wireless N range extender from China Gion Electronics TOTOLINK , which is mainly used to extend the coverage of the existing Wi-Fi network and solve the problem of signal blind zones. TOTOLINK EX200 suffers from an information disclosure vulnerability that stems from improper...

CVE-2024-31812

In TOTOLINK EX200 V4.0.3c.7646B20201211, an attacker can obtain sensitive information without authorization through the function getWiFiExtenderConfig...

CVE-2024-31812: Failure to Sanitize Special Elements into a Different Plane (Special Element Injection)

In TOTOLINK EX200 V4.0.3c.7646B20201211, an attacker can obtain sensitive information without authorization through the function getWiFiExtenderConfig...

CVE-2024-31812

The TOTOLINK EX200 wireless N range extender, specifically version 4.0.3c.7646_B20201211 , is susceptible to an information disclosure vulnerability. The root cause is improper privilege management within the getWiFiExtenderConfig function. A malicious actor can exploit this flaw to obtain sensit...