CVE-2023-52032

Deeper analysis

TOTOlink EX1200T firmware version V4.1.2cu.5232_B20210713 contains a remote command execution vulnerability in the main function. The flaw received a CVSS 3.1 score of 9.8, reflecting network-accessible attack complexity that is low, no required authentication or user interaction, and full impact on confidentiality, integrity, and availability.

An unauthenticated attacker with network access can invoke the affected function to execute arbitrary commands on the device. Successful exploitation grants complete control over the router, enabling actions such as configuration changes, traffic interception, or use of the device as an attack pivot.

Public references consist of researcher write-ups that demonstrate the issue through a download-related endpoint but contain no information on vendor patches, firmware updates, or recommended mitigations. The associated EPSS score of 0.1633 shows sustained moderate exploitation probability without a documented rise after disclosure.