The downloadFlile.cgi binary file in TOTOLINK EX200 V4.0... · CVE-2021-43711 · GitHub Advisory Database · GitHub

The downloadFlile.cgi binary file in TOTOLINK EX200 V4.0...

Critical severity Unreviewed Published Jan 5, 2022 to the GitHub Advisory Database • Updated Feb 3, 2023

Package

No package listed— Suggest a package

Affected versions

Unknown

Patched versions

Unknown

Description

The downloadFlile.cgi binary file in TOTOLINK EX200 V4.0.3c.7646_B20201211 has a command injection vulnerability when receiving GET parameters. The parameter name can be constructed for unauthenticated command execution.

References

Published by the National Vulnerability Database

Jan 4, 2022

Published to the GitHub Advisory Database Jan 5, 2022

Last updated Feb 3, 2023