<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: ex200 firmware</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2024-53333: TOTOLINK EX200 v4.0.3c.7646_B20201211 was found to contain a command insertion vulnerability in the setUssd fu</title><link>https://patchthecve.com/cve/CVE-2024-53333.html</link><guid>https://patchthecve.com/cve/CVE-2024-53333.html</guid><pubDate>Wed, 17 Jun 2026 08:08:48 +0000</pubDate><description>MEDIUM 6.3: TOTOLINK EX200 v4.0.3c.7646_B20201211 was found to contain a command insertion vulnerability in the setUssd function. This vulnerability allows an attacker to execute arbitrary commands via the &quot;ussd&quot; parameter.</description></item><item><title>CVE-2024-7336: A vulnerability classified as critical was found in TOTOLINK EX200 4.0.3c.7646_B20201211</title><link>https://patchthecve.com/cve/CVE-2024-7336.html</link><guid>https://patchthecve.com/cve/CVE-2024-7336.html</guid><pubDate>Wed, 17 Jun 2026 08:19:53 +0000</pubDate><description>HIGH 8.8: A vulnerability classified as critical was found in TOTOLINK EX200 4.0.3c.7646_B20201211. Affected by this vulnerability is the function loginauth of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument http_host leads to buffer overflow. The attack can be launched remotely. The exploit h</description></item><item><title>CVE-2024-7335: A vulnerability classified as critical has been found in TOTOLINK EX200 4.0.3c.7646_B20201211</title><link>https://patchthecve.com/cve/CVE-2024-7335.html</link><guid>https://patchthecve.com/cve/CVE-2024-7335.html</guid><pubDate>Wed, 17 Jun 2026 08:19:53 +0000</pubDate><description>HIGH 8.8: A vulnerability classified as critical has been found in TOTOLINK EX200 4.0.3c.7646_B20201211. Affected is the function getSaveConfig of the file /cgi-bin/cstecgi.cgi?action=save&amp;setting. The manipulation of the argument http_host leads to buffer overflow. It is possible to launch the attack remotel</description></item></channel></rss>