TOTOLINK EX300_v2 and EX1200T Access Control Error Vulnerability

TOTOLINK EX300 is a 300 Mbps wireless N range extender from TotoLink, China, and TOTOLINK EX1200T is a Wi-Fi range extender from Gion Electronics (TOTOLINK), China.An access control error vulnerability exists in TOTOLINK EX300_v2 and EX1200T. The vulnerability stems from the fact that the device web server does not perform any authentication, and an attacker could use the vulnerability to access the web ui and perform any action.