CVE-2024-32326: TOTOLINK EX200 · Cross-site Scripting
Source CVE Database V5
Not known to be exploited · CVSS 6.8 Medium.
Data as of 26 Oct 2026, 16:39 UTC
- EPSS
- 0.5% chance of exploitation in 30 days – higher than 47% of CVEsExploit Prediction Scoring System: the likelihood attackers will use this flaw soon.
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:NExploitation evidence
Disclosed: evidence found.
CVE published 18 Apr 2024
Detectable: no evidence on record.
No public nuclei template indexed
Weaponised: no evidence on record.
No public exploit code indexed in Metasploit or Exploit-DB
Exploited in the wildExploited: no evidence on record.
Not in CISA KEV and no source reports exploitation
Observed by OffSeq MirageSeen by Mirage: no evidence on record.
No attack traffic recorded by OffSeq Mirage sensors
A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 26 Oct 2026.
What to do
AI-suggested
To mitigate CVE-2024-32326, organizations should first restrict access to the TOTOLINK EX200 management interface to trusted networks and users only, minimizing exposure to potential attackers. Implement network segmentation and firewall rules to limit remote access to the device’s web interface. Employ strong authentication mechanisms and ensure users have the minimum necessary privileges to reduce the risk of exploitation. Monitor network traffic and logs for unusual activity that could indicate attempted exploitation. Educate users about the risks of interacting with suspicious links or inputs that could trigger XSS attacks. Regularly check for firmware updates from TOTOLINK and apply patches promptly once released. Additionally, use web application firewalls (WAFs) that can detect and block XSS payloads targeting the device’s interface.
Description
TOTOLINK EX200 V4.0.3c.7646_B20201211 contains a Cross-site scripting (XSS) vulnerability through the key parameter in the setWiFiExtenderConfig function.