CVE-2025-4268

A vulnerability has been found in TOTOLINK A720R 4.1.5cu.374 and classified as critical. This vulnerability affects unknown code of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument topicurl with the input RebootSystem leads to missing authentication. The attack can be initiated...

CVE-2025-4269 TOTOLINK A720R Log cstecgi.cgi access control

A vulnerability was found in TOTOLINK A720R 4.1.5cu.374 and classified as critical. This issue affects some unknown processing of the file /cgi-bin/cstecgi.cgi of the component Log Handler. The manipulation of the argument topicurl with the input clearDiagnosisLog/clearSyslog/clearTracerouteLog...

CVE-2025-4269

CVE-2025-4269 affects TOTOLINK A720R 4.1.5cu.374, specifically the Log Handler’s file /cgi-bin/cstecgi.cgi. Manipulating the topicurl parameter with input values like clearDiagnosisLog/clearSyslog/clearTracerouteLog results in improper access controls, potentially enabling remote exploitation. Mu...

CVE-2025-4269 TOTOLINK A720R Log cstecgi.cgi access control

A vulnerability was found in TOTOLINK A720R 4.1.5cu.374 and classified as critical. This issue affects some unknown processing of the file /cgi-bin/cstecgi.cgi of the component Log Handler. The manipulation of the argument topicurl with the input clearDiagnosisLog/clearSyslog/clearTracerouteLog...

CVE-2025-4268

The CVE-2025-4268 entry applies to TOTOLINK A720R firmware 4.1.5cu.374, where an improper authentication flaw exists in /cgi-bin/cstecgi.cgi. The vulnerability arises from manipulating the topicurl parameter with the value RebootSystem, enabling remote exploitation without authentication. Multipl...

CVE-2025-4268 TOTOLINK A720R cstecgi.cgi missing authentication

A vulnerability has been found in TOTOLINK A720R 4.1.5cu.374 and classified as critical. This vulnerability affects unknown code of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument topicurl with the input RebootSystem leads to missing authentication. The attack can be initiated...

CVE-2025-4268 TOTOLINK A720R cstecgi.cgi missing authentication

A vulnerability has been found in TOTOLINK A720R 4.1.5cu.374 and classified as critical. This vulnerability affects unknown code of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument topicurl with the input RebootSystem leads to missing authentication. The attack can be initiated...

The vulnerability of the /boafrm/formStaticDHCP function in the microprogramming software of TOTOLINK N150RT routers allows a attacker to execute arbitrary code.

The vulnerability of the /boafrm/formStaticDHCP function in TOTOLINK N150RT router microprogramming software lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code...

The vulnerability of the /boafrm/formWsc file in the microprogramming software of TOTOLINK N150RT allows a perpetrator to execute arbitrary code.

The vulnerability of the /boafrm/formWsc file of TOTOLINK N150RT microprogrammed software devices is related to incorrect elimination of special elements in the output data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

PT-2025-19350 · Totolink · Totolink A720R

Name of the Vulnerable Software and Affected Versions: TOTOLINK A720R version 4.1.5cu.374 Description: A vulnerability was found in the Config Handler component of the TOTOLINK A720R, affecting an unknown function of the file /cgi-bin/cstecgi.cgi. The manipulation of the topicurl argument with th...

PT-2025-19345 · Totolink · Totolink A720R

Name of the Vulnerable Software and Affected Versions: TOTOLINK A720R version 4.1.5cu.374 Description: A critical vulnerability has been found in the TOTOLINK A720R, affecting unknown code of the file /cgi-bin/cstecgi.cgi. The manipulation of the topicurl argument with the input RebootSystem lead...

The vulnerability of the /boafrm/formVlan function in TOTOLINK N150RT router microprogramming software allows a perpetrator to execute arbitrary code.

The vulnerability of the /boafrm/formVlan function in TOTOLINK N150RT router microprogramming software is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code...

TOTOLINK A720R 访问控制错误漏洞

TOTOLINK A720R is a wireless router from China's Gion Electronics TOTOLINK. The TOTOLINK A720R suffers from an Access Control Error vulnerability that originates from improper handling of the parameter topicurl in the file /cgi-bin/cstecgi.cgi, which can be exploited by an attacker to cause...

PT-2025-19370 · Totolink · Totolink A720R

Name of the Vulnerable Software and Affected Versions: TOTOLINK A720R version 4.1.5cu.374 Description: A vulnerability was found in the TOTOLINK A720R, affecting an unknown functionality of the file /cgi-bin/cstecgi.cgi. The manipulation of the topicurl argument with the input showSyslog leads to...

TOTOLINK A720R 访问控制错误漏洞

TOTOLINK A720R is a wireless router from China's Gion Electronics TOTOLINK. The TOTOLINK A720R suffers from an information disclosure vulnerability that originates from improper handling of the parameter topicurl in the file /cgi-bin/cstecgi.cgi, which can be exploited by an attacker to cause...

TOTOLINK A720R 安全漏洞

TOTOLINK A720R is a wireless router from China's Gion Electronics TOTOLINK. The TOTOLINK A720R suffers from an improper authentication vulnerability that stems from improper handling of the parameter topicurl in the file /cgi-bin/cstecgi.cgi, no details of the vulnerability are provided at this...

CVE-2025-45800

TOTOLINK A950RG V4.1.2cu.5204B20210112 contains a command execution vulnerability in the setDeviceName interface of the /lib/cstemodules/global.so library, specifically in the processing of the deviceMac parameter...

CVE-2025-44842

TOTOLINK CA600-PoE V5.3c.6665B20180820 was found to contain a command injection vulnerability in the msgprocess function via the Port parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request...

CVE-2025-44860

TOTOLINK CA300-POE V6.2c.884B20180522 was found to contain a command injection vulnerability in the msgprocess function via the Port parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request...

CVE-2025-44837

TOTOLINK CPE CP900 V6.3c.1144B20190715 was discovered to contain a command injection vulnerability in the CloudSrvUserdataVersionCheck function via the url or magicid parameters. This vulnerability allows attackers to execute arbitrary commands via a crafted request...