Critical Unpatched Vulnerability in TOTOLINK EX200 Wi-Fi Extender Exposes Networks to Remote Attacks The CERT Coordination Center (CERT/CC) has disclosed a severe, unpatched vulnerability (CVE-2025-65606) in the TOTOLINK EX200, a popular Wi-Fi range extender used in home and small office networks. The flaw allows remote authenticated attackers to gain full control of the device, creating significant security risks for users. ### Vulnerability Details The TOTOLINK EX200, designed to extend wireless coverage, contains a critical weakness that enables attackers to bypass security measures after authentication. Once exploited, the vulnerability permits: - Arbitrary command execution within the device’s operating environment. - Administrative access, allowing attackers to modify settings or install malicious software. - Network disruptions, including potential denial-of-service (DoS) conditions. ### Impact and Risks The flaw poses a direct threat to network security, as compromised extenders could serve as entry points for broader attacks. Attackers may: - Manipulate data flows and intercept sensitive information. - Exploit connected devices within the same network. - Alter security configurations, weakening overall network defenses. ### Current Status and Mitigation As of now, no official patch has been released for CVE-2025-65606. Security experts recommend the following interim measures: - Enhanced network monitoring to detect unusual activity. - Strict access controls, including strong, unique passwords and limiting device access to trusted users. - Firmware vigilance, with users advised to monitor manufacturer updates or security advisories for future fixes. The discovery underscores the ongoing risks posed by unpatched vulnerabilities in widely deployed networking hardware, highlighting the need for proactive security measures.