CVE-2024-53333

TOTOLINK EX200 v4.0.3c.7646_B20201211 was found to contain a command insertion vulnerability in the setUssd function. This vulnerability allows an attacker to execute arbitrary commands via the "ussd" parameter.

CVSS v3.1

6.3 MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:H

EPSS

19.38% chance of exploitation in the next 30 days, 97th percentile

Published

2024-11-21

Updated

2024-11-25

Proof-of-concept exploits (1)

• luckysmallbird/Totolink-EX200-Vulnerability-1/blob/main/README.md

References

• CVE Record
• NVD entry

Related

• CVE-2024-53334
• CVE-2024-53335
• CVE-2024-57036
• CVE-2025-51630
• CVE-2024-5333
• CVE-2024-53326