Description
The downloadFlile.cgi binary file in TOTOLINK EX200 V4.0.3c.7646_B20201211 has a command injection vulnerability when receiving GET parameters. The parameter name can be constructed for unauthenticated command execution.
Unscored
CVE-2021-43711
EUVD-2021-30618GHSA-chwf-9c6x-wv85
The downloadFlile.cgi binary file in TOTOLINK EX200 V4.0.3c.7646_B20201211 has a command injection vulnerability when receiving GET paramet…
Published Jan 4, 2022 · Updated Aug 4, 2024 · Assigned by mitre