In TOTOLINK EX200 V4.0.3c.7646_B20201211, an attacker can obtain sensitive information without authorization through the function getEasyWizardCfg.
2024-04-08T13:15:08.987
2025-03-18T16:02:17.737
Analyzed
CVSSv3.1: 7.5 (HIGH)
Type | Vendor | Product | Version/Range | Vulnerable? |
---|---|---|---|---|
Operating System | totolink | ex200_firmware | 4.0.3c.7646_b20201211 | Yes |
Hardware | totolink | ex200 | - | No |