CVE-2026-75012: high-severity vulnerability in TOTOLINK EX1200L
TOTOLINK EX1200L Password Configuration cstecgi.cgi setPasswordCfg null pointer dereference
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
41Vexday Risk Score
No sign of exploitation. It has a public proof of concept.
ssvc Attendcvss 7.1epss 0.7%
A security vulnerability has been detected in TOTOLINK EX1200L 9.3.5u.6146_B20201023. Affected by this issue is the function setPasswordCfg of the file /cgi-bin/cstecgi.cgi of the component Password Configuration Handler. The manipulation leads to null pointer dereference. The attack can be initiated remotely. The exploit has been disclosed publicly and may be used.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:P
Affected products
TOTOLINK · EX1200Lpublic PoCs found — 1
cve_referencegist.github.com/wyxstarry/afdc067090575c216a9d2622c3338e5cunverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
Related CVEs — TOTOLINK EX1200L
In the same product, most dangerous first.
CVE-2023-4411MEDIUMTOTOLINK EX1200L setTracerouteCfg os command injectionEPSS 5.2%CVE-2023-4412MEDIUMTOTOLINK EX1200L setWanCfg os command injectionEPSS 3.7%CVE-2023-4410MEDIUMTOTOLINK EX1200L setDiagnosisCfg os command injectionEPSS 3.7%CVE-2024-7909HIGHTOTOLINK EX1200L cstecgi.cgi setLanguageCfg stack-based overflowEPSS 1.5%CVE-2024-7908HIGHTOTOLINK EX1200L cstecgi.cgi setDefResponse stack-based overflowEPSS 1.5%CVE-2024-7338HIGHTOTOLINK EX1200L cstecgi.cgi setParentalRules buffer overflowEPSS 1.2%