CVEs-PoC/2021/CVE-2021-42888.md

### [CVE-2021-42888](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-42888)
![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brighgreen)

### Description

TOTOLINK EX1200T V4.1.2cu.5215 contains a remote command injection vulnerability in function setLanguageCfg of the file global.so which can control langType to attack.

### POC

#### Reference
- https://github.com/p1Kk/vuln/blob/main/totolink_ex1200t_langtype_rce.md

#### Github
No PoCs found on GitHub currently.