Record status Published
Identifier year (not publication year) 2026
Source publication Jul 9, 2026
Source updated Jul 10, 2026
Imported by cveboard Oct 24, 2026
CNA source text (English) TOTOLINK EX200 Web boa.conf least privilege violation
A security vulnerability has been detected in TOTOLINK A3000RU, A3100R, A950RG, AC1200T10, CP450, CS185R_T10 and EX200 up to 20260906. Affected by this issue is some unknown functionality of the file /etc/boa/boa.conf of the component Web Interface. The manipulation leads to least privilege violation. The attack may be initiated remotely. The attack's complexity is rated as high. The exploitation is known to be difficult.
Scoped product and version facts Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
A3000RU
Vendor TOTOLINK
Product A3000RU
Platforms Unknown
Default status Unknown
A3000RU · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 20260906 affectedUnavailable Unavailable Unavailable None listed
A3100R
Vendor TOTOLINK
Product A3100R
Platforms Unknown
Default status Unknown
A3100R · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 20260906 affectedUnavailable Unavailable Unavailable None listed
A950RG
Vendor TOTOLINK
Product A950RG
Platforms Unknown
Default status Unknown
A950RG · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 20260906 affectedUnavailable Unavailable Unavailable None listed
AC1200T10
Vendor TOTOLINK
Product AC1200T10
Platforms Unknown
Default status Unknown
AC1200T10 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 20260906 affectedUnavailable Unavailable Unavailable None listed
CP450
Vendor TOTOLINK
Product CP450
Platforms Unknown
Default status Unknown
CP450 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 20260906 affectedUnavailable Unavailable Unavailable None listed
CS185R_T10
Vendor TOTOLINK
Product CS185R_T10
Platforms Unknown
Default status Unknown
CS185R_T10 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 20260906 affectedUnavailable Unavailable Unavailable None listed
EX200
Vendor TOTOLINK
Product EX200
Platforms Unknown
Default status Unknown
EX200 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 20260906 affectedUnavailable Unavailable Unavailable None listed