Ex300 V2 Firmware

ex300_v2_firmware

Vendor: Totolink • 6 CVEs

CVEs (6)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2022-32449 1Totolink 1Ex300 V2 Firmware Jun 17, 2026 Jul 7, 2022 N/A· v4 9.8 CRITICAL· v3 10.0 HIGH· v2 TOTOLINK EX300_V2 V4.0.3c.7484 was discovered to contain a command injection vulnerability via the langType parameter in the setLanguageCfg function. This vulnerability is exploitable via a crafted MQTT data packet.
CVE-2021-43663 1Totolink 1Ex300 V2 Firmware Jun 17, 2026 Mar 31, 2022 N/A· v4 7.5 HIGH· v3 7.9 HIGH· v2 totolink EX300_v2 V4.0.3c.140_B20210429 was discovered to contain a command injection vulnerability via the component cloudupdate_check.
CVE-2021-43662 1Totolink 2A720r Firmware Ex300 V2 Firmware Jun 17, 2026 Mar 31, 2022 N/A· v4 6.5 MEDIUM· v3 3.3 LOW· v2 totolink EX300_v2, ver V4.0.3c.140_B20210429 and A720R ,ver V4.1.5cu.470_B20200911 have an issue which causes uncontrolled resource consumption.
CVE-2021-43661 1Totolink 1Ex300 V2 Firmware Jun 17, 2026 Mar 31, 2022 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 totolink EX300_v2 V4.0.3c.140_B20210429 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the component /home.asp.
CVE-2022-25008 1Totolink 2Ex1200t Firmware Ex300 V2 Firmware Jun 17, 2026 Mar 30, 2022 N/A· v4 8.8 HIGH· v3 5.8 MEDIUM· v2 totolink EX300_v2 V4.0.3c.140_B20210429 and EX1200T V4.1.2cu.5230_B20210706 does not contain an authentication mechanism.
CVE-2021-43664 1Totolink 1Ex300 V2 Firmware Jun 17, 2026 Mar 30, 2022 N/A· v4 8.1 HIGH· v3 9.3 HIGH· v2 totolink EX300_v2 V4.0.3c.140_B20210429 was discovered to contain a command injection vulnerability via the component process forceugpo.