The vulnerability of the setWanConfig() function in the cgi-bin/cstecgi.cgi script of the TOTOLINK N300RH router’s microprogramming software allows a perpetrator to execute arbitrary code or cause service failures.

The vulnerability of the setWanConfig function in the cgi-bin/cstecgi.cgi script of the TOTOLINK N300RH router’s microprogramming system is related to the issue of data being written outside the buffer in memory when processing the priDns parameter with value v46. Exploiting this vulnerability...

PT-2025-21825 · Totolink · Totolink N300Rt

Name of the Vulnerable Software and Affected Versions: TOTOLINK N300RH version 6.1c.1390 B20191101 Description: A critical vulnerability has been found in the TOTOLINK N300RH router. This issue affects the setUnloadUserData function of the /cgi-bin/cstecgi.cgi file. The manipulation of the plugin...