CVE-2024-31809

CVSS 8.8v3.1pub. 2024-04-08upd. 2025-03-18

TOTOLINK EX200 V4.0.3c.7646_B20201211 was discovered to contain a remote code execution (RCE) vulnerability via the FileName parameter in the setUpgradeFW function.

CVSS Vector

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Totolink Ex200
HW
Totolink
wszystkie wersje
Totolink Ex200 Firmware
OS
Totolink
4.0.3c.7646_b20201211

🔵

CHECK WITH VENDOR

No clear patch data available. Check vendor references.

Tags

RCE

CWE

CWE-75

References

github.com/4hsien/CVE-vulns/blob/main/TOTOLINK/EX200/CI…

Related vulnerabilities

CVE-2024-31810CRITICAL9.8PL ✓ten sam produkt

TOTOLINK EX200: zakodowane na stałe hasło roota w firmware

CVE-2024-31815CRITICAL9.1PL ✓ten sam produkt

TOTOLINK EX200 – nieautoryzowany dostęp do pliku konfiguracyjnego

CVE-2024-31807CRITICAL9.8PL ✓ten sam produkt

RCE w TOTOLINK EX200 poprzez parametr hostTime w funkcji NTPSyncWithHost

CVE-2021-43711CRITICAL9.8ten sam produkt

The downloadFlile.cgi binary file in TOTOLINK EX200 V4.0.3c.7646_B20201211 has a command injection vulnerabili...

CVE-2024-7335HIGH8.7ten sam produkt

A vulnerability classified as critical has been found in TOTOLINK EX200 4.0.3c.7646_B20201211. Affected is the...

CVE-2024-31809

Totolink Ex200

Totolink Ex200 Firmware

Related vulnerabilities