CVE-2025-2094 TOTOLINK EX1800T cstecgi.cgi setWiFiExtenderConfig os command injection

A vulnerability was found in TOTOLINK EX1800T 9.1.0cu.2112B20220316. It has been rated as critical. Affected by this issue is the function setWiFiExtenderConfig of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument apcliKey/key leads to os command injection. The attack may be launche...

CVE-2025-2094 TOTOLINK EX1800T cstecgi.cgi setWiFiExtenderConfig os command injection

A vulnerability was found in TOTOLINK EX1800T 9.1.0cu.2112B20220316. It has been rated as critical. Affected by this issue is the function setWiFiExtenderConfig of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument apcliKey/key leads to os command injection. The attack may be launche...

CVE-2025-2094

CVE-2025-2094 affects TOTOLINK EX1800T (9.1.0cu.2112_B20220316). The vulnerability is an OS command injection in the function setWiFiExtenderConfig within /cgi-bin/cstecgi.cgi, triggered by manipulating the apcliKey/key parameters. It is exploitable remotely and has been publicly disclosed. Multi...

CVE-2025-2097: Stack-based Buffer Overflow

A vulnerability, which was classified as critical, has been found in TOTOLINK EX1800T 9.1.0cu.2112B20220316. This issue affects the function setRptWizardCfg of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument loginpass leads to stack-based buffer overflow. The attack may be initiat...

CVE-2025-2096: Improper Neutralization of Special Elements used in an OS Command

A vulnerability classified as critical was found in TOTOLINK EX1800T 9.1.0cu.2112B20220316. This vulnerability affects the function setRebootScheCfg of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument mode/week/minute/recHour leads to os command injection. The attack can be initiat...

TOTOLINK EX1800T security vulnerabilities

TOTOLINK EX1800T is a wireless repeater from China's Gion Electronics TOTOLINK. The TOTOLINK EX1800T suffers from an OS command injection vulnerability that originates from the setDmzCfg contained in /cgi-bin/cstecgi.cgi, and no details of the vulnerability are provided at this time...

TOTOlink A3002R static_ipv6 parameter buffer overflow vulnerability

The TOTOLINK A3002R is a wireless router from China's Gion Electronics TOTOLINK. A buffer overflow vulnerability exists in TOTOlink A3002R version V1.1.1-B20200824.0128, which stems from the staticipv6 parameter failing to correctly validate the length and size of the input data, and can be...

TOTOLINK EX1800T Buffer Overflow Vulnerability

The TOTOLINK EX1800T is a Wi-Fi range extender from China's Gion Electronics TOTOLINK. The Totolink EX1800T suffers from a buffer overflow vulnerability that stems from the loginAuth function failing to properly validate the length and size of input data, which can be exploited by an attacker to...

PT-2025-10131

Name of the Vulnerable Software and Affected Versions TOTOLINK EX1800T version 9.1.0cu.2112 B20220316 Description A critical issue has been found in TOTOLINK EX1800T, affecting the function setRptWizardCfg of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument loginpass leads to a...

TOTOLINK X18 Command Injection Vulnerability

TOTOLINK X18 is a Gigabit router from China's Gion Electronics TOTOLINK. The TOTOLINK X18 suffers from a command injection vulnerability that stems from the mtkhnatEnable parameter of the setMtknatCfg function of the /cgi-bin/cstecgi.cgi file that does not filter command parameters. No details of...

TOTOLINK EX1800T security vulnerabilities

The TOTOLINK EX1800T is a Wi-Fi range extender from China's Gion Electronics TOTOLINK. The TOTOLINK EX1800T suffers from a buffer overflow vulnerability that originates from the parameter loginpass failing to properly validate the length size of the input data, which can be exploited by an attack...

TOTOLINK EX1800T security vulnerabilities

TOTOLINK EX1800T is a wireless repeater from China's Gion Electronics TOTOLINK. The TOTOLINK EX1800T suffers from an OS command injection vulnerability that originates from the setRebootScheCfg contained in /cgi-bin/cstecgi.cgi, and no details of the vulnerability are provided at this time...

TOTOLINK EX1800T security vulnerabilities

TOTOLINK EX1800T is a wireless repeater from China's Gion Electronics TOTOLINK. The TOTOLINK EX1800T suffers from an OS command injection vulnerability, which stems from the incorrect operation of the function setWiFiExtenderConfig parameter apcliKey and key, and no detailed vulnerability details...

PT-2025-10125

Name of the Vulnerable Software and Affected Versions TOTOLINK EX1800T version 9.1.0cu.2112 B20220316 Description A critical vulnerability was found in TOTOLINK EX1800T, affecting the function setRebootScheCfg of the file /cgi-bin/cstecgi.cgi. The manipulation of the arguments mode, week, minute,...

PT-2025-10123

Name of the Vulnerable Software and Affected Versions TOTOLINK EX1800T version 9.1.0cu.2112 B20220316 Description A critical issue was found in the setWiFiExtenderConfig function of the /cgi-bin/cstecgi.cgi file. The manipulation of the apcliKey/key argument leads to os command injection. This...

PT-2025-10124

Name of the Vulnerable Software and Affected Versions TOTOLINK EX1800T version 9.1.0cu.2112 B20220316 Description A critical vulnerability has been found in TOTOLINK EX1800T. This affects the function setDmzCfg of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument ip leads to os...

CVE-2025-2095: Improper Neutralization of Special Elements used in an OS Command

A vulnerability classified as critical has been found in TOTOLINK EX1800T 9.1.0cu.2112B20220316. This affects the function setDmzCfg of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument ip leads to os command injection. It is possible to initiate the attack remotely. The exploit has...

CVE-2025-2094: Improper Neutralization of Special Elements used in an OS Command

A vulnerability was found in TOTOLINK EX1800T 9.1.0cu.2112B20220316. It has been rated as critical. Affected by this issue is the function setWiFiExtenderConfig of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument apcliKey/key leads to os command injection. The attack may be launche...

CVE-2025-1852

A vulnerability has been found in Totolink EX1800T 9.1.0cu.2112B20220316 and classified as critical. This vulnerability affects the function loginAuth of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument password leads to buffer overflow. The attack can be initiated remotely. The...

CVE-2025-1852

A vulnerability has been found in Totolink EX1800T 9.1.0cu.2112B20220316 and classified as critical. This vulnerability affects the function loginAuth of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument password leads to buffer overflow. The attack can be initiated remotely. The...