CVE-2021-43664 — Command Injection in Ex300 V2 Firmware

CWE-77 — Command Injection3 documents3 sources
Severity
8.1HIGHNVD
EPSS
3.9%
top 11.74%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Totolink Ex300 V2 Firmware
Timeline
PublishedMar 30
Latest updateApr 1

Description

totolink EX300_v2 V4.0.3c.140_B20210429 was discovered to contain a command injection vulnerability via the component process forceugpo.

CVSS vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:HExploitability: 2.2 | Impact: 5.9

Affected Packages1 packages

▶NVDtotolink/ex300_v2_firmware4.0.3c.140_b20210429

🔴Vulnerability Details

2
GHSA
GHSA-669g-cwhp-9qg2: totolink EX300_v2 V4↗2022-04-01
▶
CVEList
CVE-2021-43664: totolink EX300_v2 V4↗2022-03-30
▶
CVE-2021-43664 — Command Injection in Ex300 V2 Firmware | cvebase