CVE-2024-31812

published 2024-04-08

CVE-2024-31812: In TOTOLINK EX200 V4.0.3c.7646_B20201211, an attacker can obtain sensitive information without authorization through the function getWiFiExtenderConfig.

medium 6.5 CVSS 3.1

AV A AC L PR N UI N S U C H I N A N

In TOTOLINK EX200 V4.0.3c.7646_B20201211, an attacker can obtain sensitive information without authorization through the function getWiFiExtenderConfig.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
totolink	ex200_firmware	—	—

CWE-75