PT-2025-43895

Name of the Vulnerable Software and Affected Versions TOTOLINK A3300R version 17.0.0cu.557 B20221024 Description A weakness exists in TOTOLINK A3300R. The issue is related to a buffer overflow in the setDdnsCfg function within the /cgi-bin/cstecgi.cgi file. This can be exploited remotely. The...

PT-2025-43920

Name of the Vulnerable Software and Affected Versions TOTOLINK A3300R version 17.0.0cu.557 B20221024 Description A flaw exists in TOTOLINK A3300R. The issue is a stack-based buffer overflow caused by the manipulation of the recHour argument within the setScheduleCfg function located in the...

PT-2025-43917

Name of the Vulnerable Software and Affected Versions TOTOLINK A3300R version 17.0.0cu.557 B20221024 Description A flaw exists in TOTOLINK A3300R that could lead to a stack-based buffer overflow. The issue is located in the setOpModeCfg function within the /cgi-bin/cstecgi.cg file, specifically...

CVE-2025-11444

A security vulnerability has been detected in TOTOLINK N600R up to 4.3.0cu.7866B20220506. This impacts the function setWiFiBasicConfig of the file /cgi-bin/cstecgi.cgi of the component HTTP Request Handler. Such manipulation of the argument wepkey leads to buffer overflow. It is possible to launc...

PT-2025-51496

Уязвимость скрипта infostat.cgi и cstecgi.cgi микропрограммного обеспечения сетевых устройств TOTOLINK A720R, LR1200GB и NR1800X связана с переполнением буфера в стеке. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании или выполнить произвольный код...

PT-2025-51497

Уязвимость скрипта cstecgi.cgi микропрограммного обеспечения маршрутизатора ToToLink LR1200GB связана с непринятием мер по очистке данных на управляющем уровне. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, выполнить произвольные команды при обработке параметра imei...

PT-2025-51498

Уязвимость скрипта cstecgi.cgi микропрограммного обеспечения маршрутизаторов TOTOLINK LR1200GB и NR1800X. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, вызвать отказ в обслуживании или выполнить произвольный код при обработке параметра IpAddress...

TOTOLINK X18 Set EasyMesh Agent Config Command Execution

The vulnerability of the setEasyMeshAgentCfg function in the microprogramming software for TOTOLINK X18 lies in the lack of measures taken to clean data at the management level when processing the mac parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

TOTOLINK downloadFile.cgi RCE

The vulnerability in the downloadFile.cgi subroutine of the TOTOLINK A830R, TOTOLINK A950RG, TOTOLINK A3000RU, and TOTOLINK A3100R routers stems from the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker to compromise the...

TOTOLINK downloadFile.cgi RCE

The vulnerability of the downloadFile.cgi script in the microprogramming software for TOTOLINK A830R, TOTOLINK A950RG, TOTOLINK A3000RU, and TOTOLINK A3100R is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity...

TOTOLINK X6000R Router Command Execution

The vulnerability of TOTOLINK X6000R router microprogramming software is related to insufficient verification of input data. Exploiting this vulnerability can allow a remote attacker to execute arbitrary commands...

TOTOLINK downloadFile.cgi RCE

The vulnerability of the downloadFile.cgi file in the microprogramming software for TOTOLINK A830R, TOTOLINK A950RG, TOTOLINK A3000RU, and TOTOLINK A3100R lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker to compromis...

Totolink N600R DoS

The vulnerability of the Totolink N600R router’s microprogramming software is related to the manipulation of the zero pointer. Exploiting this vulnerability could allow a malicious actor to cause service failure...

TOTOLINK X18 Set EasyMesh Agent Config Command Execution

The vulnerability of the setEasyMeshAgentCfg function in the microprogramming software for TOTOLINK X18 lies in the lack of measures taken to clean data at the management level when processing the agentName parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary...

TotalLink A3002R formIpv6Setup Code Execution

The vulnerability of the formIpv6Setup interface in the /bin/boa binary of the Totolink A3002R router’s microprogramming system is related to the copying of buffers without checking the size of the input data during the processing of the pppoedns1 parameter. Exploiting this vulnerability allows a...

TOTOLINK downloadFile.cgi RCE

The vulnerability of the downloadFile.cgi script in the microprogramming software for TOTOLINK A830R, TOTOLINK A950RG, TOTOLINK A3000RU, and TOTOLINK A3100R is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity...

TOTOLINK downloadFile.cgi RCE

The vulnerability of the downloadFile.cgi script in the microprogramming software for TOTOLINK A830R, TOTOLINK A950RG, TOTOLINK A3000RU, and TOTOLINK A3100R is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity...

TOTOLINK X6000R Router Command Execution

The vulnerability of the TOTOLINK X6000R router’s microprogramming software is related to insufficient verification of input data. Exploiting this vulnerability could allow a remote attacker to execute arbitrary commands...

TOTOLINK X6000R Set WiFi Acl Rules Command Execution

The vulnerability of the setWiFiAclRules function in the TOTOLINK X6000R router software lies in the lack of measures taken to neutralize special elements during the processing of the desc parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

PT-2025-46845

Name of the Vulnerable Software and Affected Versions ToToLink LR1200GB versions 9.1.0u.6619 B20230130 ToToLink NR1800X versions 9.1.0u.6681 B20230703 Description A stack buffer overflow issue exists in the ToToLink routers. The web interface reads the lang parameter and constructs Help URL strin...