TOTOLINK N200RE 安全漏洞

TOTOLINK N200RE is a SOHO wireless router with 11N wireless technology, the highest wireless transmission rate of up to 300Mbps, support for MIMO architecture and ATCT free channel auto-detection technology, effectively improve wireless performance and stability. TOTOLINK N200RE has a command...

TOTOLINK EX1200T 安全漏洞

The TOTOLINK EX1200T is a dual-band wireless signal amplifier that is primarily used to extend the coverage of an existing wireless network. The TOTOLINK EX1200T suffers from a stack buffer overflow vulnerability that originates from the failure of the function setStaticDhcpConfig in the file...

TOTOLINK T10 安全漏洞

The TOTOLINK T10 is a wireless router manufactured by TOTOLINK. A buffer overflow vulnerability exists in TOTOLINK T10 4.1.8cu.5207. The vulnerability affects the UploadCustomModule function in the /cgi-bin/cstecgi.cgi file in the POST request handling component. An attacker could use this...

Multilaser Sirius RE016 访问控制错误漏洞

The Multilaser Sirius RE016 is a networking device from Multilaser Sirius. An access control error vulnerability exists in Multilaser Sirius RE016 MLT version 1.0, which originates in the file /cgi-bin/cstecgi.cgi leading to information disclosure...

Multilaser Sirius RE016 授权问题漏洞

Multilaser Sirius RE016 is a network appliance from Multilaser Sirius. An authorization issue vulnerability exists in Multilaser Sirius RE016 MLT version 1.0, which stems from improper authentication in the file /cgi-bin/cstecgi.cgi...

CVE-2025-4849

A vulnerability was found in TOTOLINK N300RH 6.1c.1390B20191101. It has been rated as critical. Affected by this issue is the function CloudACMunualUpdateUserdata of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument url leads to command injection. The attack may be launched remotely...

TOTOLINK N300RH 注入漏洞

TOTOLINK N300RH is a long range wireless router from China's Gion Electronics TOTOLINK. The TOTOLINK N300RH suffers from a command injection vulnerability that stems from the parameter pluginname in the file /cgi-bin/cstecgi.cgi failing to correctly filter constructed command special characters,...

CVE-2025-4268

A vulnerability has been found in TOTOLINK A720R 4.1.5cu.374 and classified as critical. This vulnerability affects unknown code of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument topicurl with the input RebootSystem leads to missing authentication. The attack can be initiated...

TOTOLINK A720R 访问控制错误漏洞

TOTOLINK A720R is a wireless router from China's Gion Electronics TOTOLINK. The TOTOLINK A720R suffers from an information disclosure vulnerability that originates from improper handling of the parameter topicurl in the file /cgi-bin/cstecgi.cgi, which can be exploited by an attacker to cause...

TOTOLINK A720R 访问控制错误漏洞

TOTOLINK A720R is a wireless router from China's Gion Electronics TOTOLINK. The TOTOLINK A720R suffers from an Access Control Error vulnerability that originates from improper handling of the parameter topicurl in the file /cgi-bin/cstecgi.cgi, which can be exploited by an attacker to cause...

TOTOLINK X18 安全漏洞

The TOTOLINK X18 is a wireless router from TOTOLINK that provides a high-speed and stable wireless network connection. The TOTOLINK X18 suffers from a command execution vulnerability that originates in the enable parameter of the sub41105C function of the cstecgi.cgi file. An attacker can exploit...

CVE-2025-3666

A vulnerability was found in TOTOLINK A3700R 9.1.2u.5822B20200513 and classified as critical. Affected by this issue is the function setDdnsCfg of the file /cgi-bin/cstecgi.cgi. The manipulation leads to improper access controls. The attack may be launched remotely. The exploit has been disclosed...

The vulnerability of the setL2tpdConfig function (cgi-bin/cstecgi.cgi) in the TOTOLINK X18 router microprogramming software, which allows a hacker to execute arbitrary commands.

The vulnerability of the setL2tpdConfig function cgi-bin/cstecgi.cgi in the TOTOLINK X18 router microprogramming software exists because measures to neutralize special elements during the processing of the enable parameter are not taken. Exploiting this vulnerability allows a remote attacker to...

CVE-2025-1340

A vulnerability classified as critical has been found in TOTOLINK X18 9.1.0cu.2024B20220329. Affected is the function setPasswordCfg of the file /cgi-bin/cstecgi.cgi. The manipulation as part of String leads to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit...

TOTOLINK AC1200 安全漏洞

TOTOLINK AC1200 T8 and AC1200 T10 are wireless router devices. A buffer overflow vulnerability exists in the TOTOLINK AC1200 T8 and AC1200 T10 cstecgi.cgi file setParentalRules function, which stems from the desc parameter not being validated for proper length. An attacker could exploit this...

PT-2024-39114 · Totolink · Totolink Ac1200 T10 +1

Name of the Vulnerable Software and Affected Versions: TOTOLINK AC1200 T8 and AC1200 T10 versions 4.1.5cu.861 B20230220 through 4.1.8cu.5207 Description: A critical vulnerability was found in the affected software. The issue affects the function setStaticDhcpRules of the file /cgi-bin/cstecgi.cgi...

TOTOLINK X6000R 命令注入漏洞

TOTOLINK X6000R is a wireless router from China's Gion Electronics TOTOLINK. TOTOLINK X6000R version 9.4.0cu.85220230719 suffers from a command injection vulnerability that originates from the parameter rtLogServer in the file /cgi-bin/cstecgi.cgi that can lead to command injection. An attacker c...

TOTOLINK X5000R 操作系统命令注入漏洞

The TOTOLINK X5000r is a wireless router manufactured by TOTOLINK. TOTOLINK X5000r has a command injection vulnerability in version 9.1.0cu.2350b20230313. The vulnerability arises because the setAccessDeviceCfg function within the /cgi-bin/cstecgi.cgi file fails to properly validate or clean up...

TOTOLINK X5000R 安全漏洞

The TOTOLINK X5000R is a router from China's Gion Electronics TOTOLINK. An operating system command injection vulnerability exists in TOTOLINK X5000R version v9.1.0cu.2350b20230313. The vulnerability stems from the addBlacklist function in the file /cgi-bin/cstecgi.cgi failing to properly filter...

CVE-2024-42745

In TOTOLINK X5000r v9.1.0cu.2350b20230313, the file /cgi-bin/cstecgi.cgi contains an OS command injection vulnerability in setUPnPCfg. Authenticated Attackers can send malicious packet to execute arbitrary commands...