CVE-2025-28039
Critical
Description
TOTOLINK EX1200T V4.1.2cu.5232_B20210713 was found to contain a pre-auth remote command execution vulnerability in the setUpgradeFW function through the FileName parameter.
SeverityCritical
CVSS9.8
Exploit probability—
ProductTotolink Ex1200t Firmware
PublishedApr 22, 2025
First seenApr 22, 2025
Weakness typeCWE-78OS command injection
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| totolink ex1200t_firmware | 4.1.2cu.5232_b20210713 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.