Network Security Trends: Recent Exploits Observed in the Wild Include Remote Code Execution, Cross
60
CVE-2021-43711
- CVSS 3.1
- 9.8 critical
- EPSS
- 38%p99
- Published
- ·
- Modified
Description · NVD
The downloadFlile.cgi binary file in TOTOLINK EX200 V4.0.3c.7646_B20201211 has a command injection vulnerability when receiving GET parameters. The parameter name can be constructed for unauthenticated command execution.
- Vendors
- totolink
- Products
- ex200 firmware
- Weakness
- CWE-77
- Vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H