totolink ex200 firmware

Name: totolink ex200 firmware
Brand: totolink

productUS

cpe:2.3:o:totolink:ex200_firmware:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

by severity

1critical2high0medium0low

updated 2026-10-29

vulnerabilities (19)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2024-31817US	—	55.3% (99th)	—	no fix	2024-04-08	= 4.0.3c.7646_b20201211
CVE-2021-43711US	critical9.8	37.8% (99th)	—	no fix	2022-01-04	= 4.0.3c.7646_b20201211
CVE-2024-53333US	—	19.9% (97th)	—	no fix	2024-11-21	= 4.0.3c.7646_b20201211
CVE-2024-31814US	—OT elevated	8.33% (95th)	—	no fix	2024-04-08	= 4.0.3c.7646_b20201211
CVE-2024-31816US	—	2.70% (86th)	—	no fix	2024-04-08	= 4.0.3c.7646_b20201211
CVE-2024-31807US	—	1.37% (72nd)	—	no fix	2024-04-08	= 4.0.3c.7646_b20201211
CVE-2024-7336US	high8.8	1.27% (70th)	—	no fix	2024-08-01	= 4.0.3c.7646_b20201211
CVE-2024-7335US	high8.8	1.16% (67th)	—	no fix	2024-08-01	= 4.0.3c.7646_b20201211
CVE-2024-31809US	—	0.98% (62nd)	—	no fix	2024-04-08	= 4.0.3c.7646_b20201211
CVE-2024-31811US	—	0.97% (62nd)	—	no fix	2024-04-08	= 4.0.3c.7646_b20201211
CVE-2024-31808US	—	0.93% (60th)	—	no fix	2024-04-08	= 4.0.3c.7646_b20201211
CVE-2024-31810US	—OT elevated	0.61% (49th)	—	no fix	2024-05-14	= 4.0.3c.7646_b20201211
CVE-2024-31815US	—	0.58% (48th)	—	no fix	2024-04-08	= 4.0.3c.7646_b20201211
CVE-2024-32326US	—	0.57% (47th)	—	no fix	2024-04-18	= 4.0.3c.7646_b20201211
CVE-2024-31805US	—	0.50% (43rd)	—	no fix	2024-04-08	= 4.0.3c.7646_b20201211
CVE-2024-32325US	—	0.49% (42nd)	—	no fix	2024-04-18	= 4.0.3c.7646_b20201211
CVE-2024-31806US	—	0.39% (33rd)	—	no fix	2024-04-08	= 4.0.3c.7646_b20201211
CVE-2024-31812US	—	0.34% (28th)	—	no fix	2024-04-08	= 4.0.3c.7646_b20201211
CVE-2024-31813US	—OT elevated	0.20% (10th)	—	no fix	2024-04-08	= 4.0.3c.7646_b20201211

The flaw types (CWEs) most of these CVEs share.

CWE-200Exposure of Sensitive Information to an Unauthorized Actor3 CVEs
CWE-75Failure to Sanitize Special Elements into a Different Plane (Special Element Injection)3 CVEs
CWE-77Improper Neutralization of Special Elements used in a Command ('Command Injection')3 CVEs
CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')2 CVEs
CWE-285Improper Authorization2 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')2 CVEs
CWE-233Improper Handling of Parameters1 CVEs
CWE-259Use of Hard-coded Password1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.