PT-2024-14366 · Totolink · Totolink Ex1200T

Published 2024-01-11 · Updated 2025-06-17 · CVE-2023-52032

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions TOTOlink EX1200T version 4.1.2cu.5232 B20210713

Description The issue is related to a remote command execution (RCE) vulnerability. It is exploited via the main function.

Recommendations For TOTOlink EX1200T version 4.1.2cu.5232 B20210713, consider disabling the main function as a temporary workaround until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

BDU:2025-11318

CVE-2023-52032

Affected Products

Totolink Ex1200T

References · 7

• 🔥 https://815yang.github.io/2023/12/24/cve6/EX1200T_V4.1.2cu.5232_B20210713_downloadFlile · Exploit
• https://osv.dev/vulnerability/CVE-2023-52032 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-11318 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-52032 · Security Note
• https://twitter.com/CVEnew/status/1745374029794382065 · Twitter Post
• https://t.me/cvenotify/125943 · Telegram Post
• https://github.com/advisories/GHSA-3h6c-fr7r-7jmg · Note