TOTOLINK EX200 V4.0.3c.7646_B20201211 was discovered to contain a remote code execution (RCE) vulnerability via the FileName parameter in the setUpgradeFW function.
CWE-75 Failure to Sanitize Special Elements into a Different Plane (Special Element Injection)