EXPOSURES › CVE-2021-42875

CVE-2021-42875

CRITICAL

DETAIL

SourceNVD · cve Published2022-06-02 CVSS9.8 Referencehttps://nvd.nist.gov/vuln/detail/CVE-2021-42875 ↗

⚡ RCE SHAME 50/100 rce

TOTOLINK EX1200T V4.1.2cu.5215 contains a remote command injection vulnerability in the function setDiagnosisCfg of the file lib/cste_modules/system.so to control the ipDoamin.

▸ RECOMMENDED ACTION Remote code execution — patch the affected products on priority.

PLAYERS IMPLICATED

totolink · vendor ex1200t · product ex1200t firmware · product

DESCRIPTION

TOTOLINK EX1200T V4.1.2cu.5215 contains a remote command injection vulnerability in the function setDiagnosisCfg of the file lib/cste_modules/system.so to control the ipDoamin.

AFFECTED FEDRAMP PRODUCTS · 0

No correlated FedRAMP products.