CVEvulnerability

CVE-2021-43663

7.5 HIGH Published 2022-03-31 Modified 2026-06-17 Official page ↗

Status: Modified
Published: 2022-03-31
Last modified: 2026-06-17
Assigner: [email protected]
CVSS 3.1 ([email protected]): 7.5 HIGH — CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected]): 7.9 HIGH — AV:A/AC:M/Au:N/C:C/I:C/A:C
Weaknesses: CWE-77

Description

totolink EX300_v2 V4.0.3c.140_B20210429 was discovered to contain a command injection vulnerability via the component cloudupdate_check.

Affected configurations

• totolink ex300 v2 firmware 4.0.3c.140 b20210429

Related

Weakness · CWE (1)

CWE-77 Improper Neutralization of Special Elements used in a Command weakness

References

https://github.com/chibataiki/iot-vuls/blob/main/totolink/command-injection1.md Exploit, Third Party Advisory
https://github.com/chibataiki/iot-vuls/blob/main/totolink/command-injection1.md Exploit, Third Party Advisory