Vulnerability Details CVE-2024-32326
TOTOLINK EX200 V4.0.3c.7646_B20201211 contains a Cross-site scripting (XSS) vulnerability through the key parameter in the setWiFiExtenderConfig function.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 32.4%
CVSS Severity
CVSS v3 Score 6.8
References
- https://github.com/4hsien/CVE-vulns/blob/main/TOTOLINK/EX200/XSS_key/README.md
- https://www.totolink.net/home/menu/newstpl/menu_newstpl/products/id/144.html
- https://github.com/4hsien/CVE-vulns/blob/main/TOTOLINK/EX200/XSS_key/README.md
- https://www.totolink.net/home/menu/newstpl/menu_newstpl/products/id/144.html
Products affected by CVE-2024-32326
-
cpe:2.3:h:totolink:ex200:-
-
cpe:2.3:o:totolink:ex200_firmware:4.0.3c.7646_b20201211