CVE-2025-3675: Improper Access Control

A vulnerability was found in TOTOLINK A3700R 9.1.2u.5822B20200513. It has been rated as critical. Affected by this issue is the function setL2tpServerCfg of the file /cgi-bin/cstecgi.cgi. The manipulation leads to improper access controls. The attack may be launched remotely. The exploit has been...

CVE-2025-3666: Improper Access Control

A vulnerability was found in TOTOLINK A3700R 9.1.2u.5822B20200513 and classified as critical. Affected by this issue is the function setDdnsCfg of the file /cgi-bin/cstecgi.cgi. The manipulation leads to improper access controls. The attack may be launched remotely. The exploit has been disclosed...

CVE-2025-3665: Improper Access Control

A vulnerability has been found in TOTOLINK A3700R 9.1.2u.5822B20200513 and classified as critical. Affected by this vulnerability is the function setSmartQosCfg of the file /cgi-bin/cstecgi.cgi. The manipulation leads to improper access controls. The attack can be launched remotely. The exploit h...

CVE-2025-3668: Improper Access Control

A vulnerability was found in TOTOLINK A3700R 9.1.2u.5822B20200513. It has been declared as critical. This vulnerability affects the function setScheduleCfg of the file /cgi-bin/cstecgi.cgi. The manipulation leads to improper access controls. The attack can be initiated remotely. The exploit has...

PT-2025-16561

Name of the Vulnerable Software and Affected Versions TOTOLINK A3700R version 9.1.2u.5822 B20200513 Description A critical issue affects the setUrlFilterRules function of the /cgi-bin/cstecgi.cgi file, leading to improper access controls. The issue can be exploited remotely. Recommendations For...

CVE-2025-29064

An issue in TOTOLINK x18 v.9.1.0cu.2024B20220329 allows a remote attacker to execute arbitrary code via the sub410E54 function of the cstecgi.cgi...

CVE-2025-29064

An issue in TOTOLINK x18 v.9.1.0cu.2024B20220329 allows a remote attacker to execute arbitrary code via the sub410E54 function of the cstecgi.cgi...

CVE-2025-29064: Improper Control of Generation of Code

An issue in TOTOLINK x18 v.9.1.0cu.2024B20220329 allows a remote attacker to execute arbitrary code via the sub410E54 function of the cstecgi.cgi...

The vulnerability of the setWiFiScheduleCfg() function in the web/cgi-bin/cstecgi.cgi script of the TOTOLINK X5000R router’s microprogramming software allows a perpetrator to execute arbitrary commands.

The vulnerability of the setWiFiScheduleCfg function in the web/cgi-bin/cstecgi.cgi script of the TOTOLINK X5000R router’s microprogramming system is related to the failure to take measures to neutralize special elements used in the operating system’s processing of the desc parameter. Exploiting...

CVE-2025-2095 TOTOLINK EX1800T cstecgi.cgi setDmzCfg os command injection

A vulnerability classified as critical has been found in TOTOLINK EX1800T 9.1.0cu.2112B20220316. This affects the function setDmzCfg of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument ip leads to os command injection. It is possible to initiate the attack remotely. The exploit has...

CVE-2025-2095: Improper Neutralization of Special Elements used in an OS Command

A vulnerability classified as critical has been found in TOTOLINK EX1800T 9.1.0cu.2112B20220316. This affects the function setDmzCfg of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument ip leads to os command injection. It is possible to initiate the attack remotely. The exploit has...

PT-2025-10131

Name of the Vulnerable Software and Affected Versions TOTOLINK EX1800T version 9.1.0cu.2112 B20220316 Description A critical issue has been found in TOTOLINK EX1800T, affecting the function setRptWizardCfg of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument loginpass leads to a...

PT-2025-10125

Name of the Vulnerable Software and Affected Versions TOTOLINK EX1800T version 9.1.0cu.2112 B20220316 Description A critical vulnerability was found in TOTOLINK EX1800T, affecting the function setRebootScheCfg of the file /cgi-bin/cstecgi.cgi. The manipulation of the arguments mode, week, minute,...

PT-2025-10123

Name of the Vulnerable Software and Affected Versions TOTOLINK EX1800T version 9.1.0cu.2112 B20220316 Description A critical issue was found in the setWiFiExtenderConfig function of the /cgi-bin/cstecgi.cgi file. The manipulation of the apcliKey/key argument leads to os command injection. This...

PT-2025-10124

Name of the Vulnerable Software and Affected Versions TOTOLINK EX1800T version 9.1.0cu.2112 B20220316 Description A critical vulnerability has been found in TOTOLINK EX1800T. This affects the function setDmzCfg of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument ip leads to os...

CVE-2025-2094: Improper Neutralization of Special Elements used in an OS Command

A vulnerability was found in TOTOLINK EX1800T 9.1.0cu.2112B20220316. It has been rated as critical. Affected by this issue is the function setWiFiExtenderConfig of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument apcliKey/key leads to os command injection. The attack may be launche...

CVE-2025-2096: Improper Neutralization of Special Elements used in an OS Command

A vulnerability classified as critical was found in TOTOLINK EX1800T 9.1.0cu.2112B20220316. This vulnerability affects the function setRebootScheCfg of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument mode/week/minute/recHour leads to os command injection. The attack can be initiat...

CVE-2025-2097: Stack-based Buffer Overflow

A vulnerability, which was classified as critical, has been found in TOTOLINK EX1800T 9.1.0cu.2112B20220316. This issue affects the function setRptWizardCfg of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument loginpass leads to stack-based buffer overflow. The attack may be initiat...

CVE-2025-1852 Totolink EX1800T cstecgi.cgi loginAuth buffer overflow

A vulnerability has been found in Totolink EX1800T 9.1.0cu.2112B20220316 and classified as critical. This vulnerability affects the function loginAuth of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument password leads to buffer overflow. The attack can be initiated remotely. The...

CVE-2025-1829

A vulnerability was found in TOTOLINK X18 9.1.0cu.2024B20220329. It has been declared as critical. This vulnerability affects the function setMtknatCfg of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument mtkhnatEnable leads to os command injection. The attack can be initiated...