CVE-2024-32326

TOTOLINK EX200 V4.0.3c.7646B20201211 contains a Cross-site scripting XSS vulnerability through the key parameter in the setWiFiExtenderConfig function...

CVE-2024-32325

The TOTOLINK EX200 (version 4.0.3c.7646_B20201211) is vulnerable to a Cross-site scripting (XSS) vulnerability in the setWiFiExtenderConfig function. The root cause is the lack of effective filtering and escaping of user-supplied data via the ssid parameter, as well as inadequate protection of th...

CVE-2024-32326

The TOTOLINK EX200 router (version V4.0.3c.7646_B20201211 ) is vulnerable to a Cross-site scripting (XSS) attack. The root cause is a lack of adequate protection and effective filtering/escaping of user-supplied data in the key parameter of the setWiFiExtenderConfig function. A remote attacker ca...

CVE-2024-32326

TOTOLINK EX200 V4.0.3c.7646B20201211 contains a Cross-site scripting XSS vulnerability through the key parameter in the setWiFiExtenderConfig function...

CVE-2024-32326

TOTOLINK EX200 V4.0.3c.7646B20201211 contains a Cross-site scripting XSS vulnerability through the key parameter in the setWiFiExtenderConfig function...

CVE-2024-31816

In TOTOLINK EX200 V4.0.3c.7646B20201211, an attacker can obtain sensitive information without authorization through the function getEasyWizardCfg...

CVE-2024-31811

TOTOLINK EX200 V4.0.3c.7646B20201211 was discovered to contain a remote code execution RCE vulnerability via the langType parameter in the setLanguageCfg function...

CVE-2024-31806

TOTOLINK EX200 V4.0.3c.7646B20201211 was discovered to contain a Denial-of-Service DoS vulnerability in the RebootSystem function which can reboot the system without authorization...

CVE-2024-31811

The TOTOLINK EX200 wireless N range extender (version 4.0.3c.7646_B20201211 ) contains a remote code execution (RCE) vulnerability. The root cause is the setLanguageCfg function's failure to adequately filter special elements or clean up data when processing the langType parameter. This allows a ...

CVE-2024-31813

TOTOLINK EX200 V4.0.3c.7646B20201211 does not contain an authentication mechanism by default...

CVE-2024-31813

The TOTOLINK EX200 (version 4.0.3c.7646_B20201211 ) lacks a default authentication mechanism , which may allow unauthorized access to the device's features. As a temporary workaround, users are advised to restrict access to the device's web interface to minimize risk. No newer version containing ...

CVE-2024-31813

TOTOLINK EX200 V4.0.3c.7646B20201211 does not contain an authentication mechanism by default...

CVE-2024-31814

The TOTOLINK EX200 wireless N range extender, specifically version 4.0.3c.7646_B20201211 , contains a security vulnerability in the Form_Login function. This flaw allows a remote attacker to bypass authentication by using an alternative path or channel , effectively circumventing security restric...

CVE-2024-31806

The TOTOLINK EX200 wireless N range extender is susceptible to a Denial-of-Service (DoS) vulnerability in the RebootSystem function. The root cause is a failure to properly validate user input, allowing an attacker to reboot the system without authorization . This issue specifically affects versi...