Medium · 6.5 CVE-2024-31805 EUVD-2024-29678GHSA-h2xm-59gc-23mm

TOTOLINK EX200 V4.0.3c.7646_B20201211 allows attackers to start the Telnet service without authorization via the telnet_enabled parameter i…

Published Apr 8, 2024 · Updated Aug 15, 2024 · Assigned by mitre

Description

TOTOLINK EX200 V4.0.3c.7646_B20201211 allows attackers to start the Telnet service without authorization via the telnet_enabled parameter in the setTelnetCfg function.

References

https://github.com/4hsien/CVE-vulns/blob/main/TOTOLINK/EX200/CI_5_setTelnetCfg/CI.md