CVE-2021-43664
totolink EX300_v2 V4.0.3c.140_B20210429 was discovered to contain a command injection vulnerability via the component process forceugpo.
Date published : 2022-03-30
https://github.com/chibataiki/iot-vuls/blob/main/totolink/command-injection2.md