en
EX200 is a consumer networking device provided by TOTOLINK. Its primary purpose is to extend an existing 2.4 GHz wireless network through Wireless N connectivity, with WPS-based setup, two external antennas, and a wired Ethernet connection for compatible devices. It is normally deployed as a plug-in range extender in residential or small-office environments.
Official website · m.totolink.netAs of 10/05/2026, within CyStack's analyzed data, EX200 has 1 security vulnerability published in the last 90 days. Of these, 1 is rated High or Critical. None of these vulnerabilities is listed in the CISA KEV catalog. CyStack recommends that organizations and individual users remediate applicable vulnerabilities as soon as possible.
CyStack does not yet have sufficient official-source data to identify the latest version of EX200 and determine which vulnerabilities affect that version.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
Explore CyStack VulnScanSeverity across 4 analyzed records
| Vulnerability | Exploitation status | Fix | Published | Severity |
|---|---|---|---|---|
CVE-2026-15271TOTOLINK EX200 Web boa.conf least privilege violation | Exploitation statusNot known exploited | FixNot confirmed | Published07/09/2026 | SeverityHigh |
CVE-2026-11620TOTOLINK EX200 vsftpd vsftpd.conf least privilege violation | Exploitation statusPublic exploit | FixNot confirmed | Published06/09/2026 | SeverityMedium |
CVE-2024-7336TOTOLINK EX200 cstecgi.cgi loginauth buffer overflow | Exploitation statusPublic exploit | FixNot confirmed | Published08/01/2024 | SeverityHigh |
CVE-2024-7335TOTOLINK EX200 getSaveConfig buffer overflow | Exploitation statusPublic exploit | FixNot confirmed | Published08/01/2024 | SeverityHigh |
CVE-2024-31810 | Exploitation statusPublic exploit | FixNot confirmed | Published05/13/2024 | SeverityCritical |
CVE-2024-32326 | Exploitation statusNot known exploited | FixNot confirmed | Published04/18/2024 | SeverityMedium |
CVE-2024-32325 | Exploitation statusPublic exploit | FixNot confirmed | Published04/18/2024 | SeverityLow |
CVE-2024-31817 | Exploitation statusPublic exploit | FixNot confirmed | Published04/08/2024 | SeverityHigh |
