TOTOLINK EX200 V4.0.3c.7646_B20201211 was discovered to contain a remote code execution (RCE) vulnerability via the FileName parameter in the setUpgradeFW function.
The product does not adequately filter user-controlled input for special elements with control implications.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Ex200_firmware | Totolink | 4.0.3c.7646_b20201211 (including) | 4.0.3c.7646_b20201211 (including) |