15672 matches found
CVE-2025-1852
Affects Totolink EX1800T (9.1.0cu.2112_B20220316). The vulnerability lies in loginAuth within /cgi-bin/cstecgi.cgi, where improper handling of the password argument allows a remote buffer overflow, potentially enabling arbitrary code execution. Publicly disclosed exploit details are noted in the ...
CVE-2025-1852 Totolink EX1800T cstecgi.cgi loginAuth buffer overflow
A vulnerability has been found in Totolink EX1800T 9.1.0cu.2112B20220316 and classified as critical. This vulnerability affects the function loginAuth of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument password leads to buffer overflow. The attack can be initiated remotely. The...
CVE-2025-1852 Totolink EX1800T cstecgi.cgi loginAuth buffer overflow
A vulnerability has been found in Totolink EX1800T 9.1.0cu.2112B20220316 and classified as critical. This vulnerability affects the function loginAuth of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument password leads to buffer overflow. The attack can be initiated remotely. The...
CVE-2025-1852: Buffer Copy without Checking Size of Input
A vulnerability has been found in Totolink EX1800T 9.1.0cu.2112B20220316 and classified as critical. This vulnerability affects the function loginAuth of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument password leads to buffer overflow. The attack can be initiated remotely. The...
TOTOLINK EX1800T security vulnerabilities
The TOTOLINK EX1800T is a Wi-Fi range extender from China's Gion Electronics TOTOLINK. The Totolink EX1800T suffers from a buffer overflow vulnerability that stems from the loginAuth function failing to properly validate the length and size of input data, which can be exploited by an attacker to...
TOTOLINK X18 Router Code Execution
The vulnerability of the setPasswordCfg function in the TOTOLINK X18 router microprogramming system lies in the reading of data beyond the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
CVE-2025-1829
A vulnerability was found in TOTOLINK X18 9.1.0cu.2024B20220329. It has been declared as critical. This vulnerability affects the function setMtknatCfg of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument mtkhnatEnable leads to os command injection. The attack can be initiated...
CVE-2025-1829
A vulnerability was found in TOTOLINK X18 9.1.0cu.2024B20220329. It has been declared as critical. This vulnerability affects the function setMtknatCfg of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument mtkhnatEnable leads to os command injection. The attack can be initiated...
CVE-2025-1829 TOTOLINK X18 cstecgi.cgi setMtknatCfg os command injection
A vulnerability was found in TOTOLINK X18 9.1.0cu.2024B20220329. It has been declared as critical. This vulnerability affects the function setMtknatCfg of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument mtkhnatEnable leads to os command injection. The attack can be initiated...
CVE-2025-1829
TOTOLINK X18 devices running 9.1.0cu.2024_B20220329 are affected by a command-injection vulnerability in the CGI endpoint /cgi-bin/cstecgi.cgi, specifically via manipulating the mtkhnatEnable argument in the setMtknatCfg function. Exploitation can be performed remotely and has been disclosed publ...
CVE-2025-1829 TOTOLINK X18 cstecgi.cgi setMtknatCfg os command injection
A vulnerability was found in TOTOLINK X18 9.1.0cu.2024B20220329. It has been declared as critical. This vulnerability affects the function setMtknatCfg of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument mtkhnatEnable leads to os command injection. The attack can be initiated...
CVE-2025-25609
TOTOlink A3002R V1.1.1-B20200824.0128 contains a buffer overflow vulnerability. The vulnerability arises from the improper input validation of the staticipv6 parameter in the formIpv6Setup interface of /bin/boa...
CVE-2025-25610
TOTOlink A3002R V1.1.1-B20200824.0128 contains a buffer overflow vulnerability. The vulnerability arises from the improper input validation of the staticgw parameter in the formIpv6Setup interface of /bin/boa...
CVE-2025-25635
TOTOlink A3002R V1.1.1-B20200824.0128 contains a buffer overflow vulnerability. The vulnerability arises from the improper input validation of the pppoedns1 parameter in the formIpv6Setup interface of /bin/boa...
CVE-2025-1829: Improper Neutralization of Special Elements used in an OS Command
A vulnerability was found in TOTOLINK X18 9.1.0cu.2024B20220329. It has been declared as critical. This vulnerability affects the function setMtknatCfg of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument mtkhnatEnable leads to os command injection. The attack can be initiated...
PT-2025-9254
Name of the Vulnerable Software and Affected Versions Totolink EX1800T version 9.1.0cu.2112 B20220316 Description A critical vulnerability has been found in the Totolink EX1800T, affecting the loginAuth function of the file /cgi-bin/cstecgi.cgi. The manipulation of the password argument leads to ...
TOTOLINK X18 security vulnerabilities
TOTOLINK X18 is a Gigabit router from China's Gion Electronics TOTOLINK. The TOTOLINK X18 suffers from a command injection vulnerability that stems from the mtkhnatEnable parameter of the setMtknatCfg function of the /cgi-bin/cstecgi.cgi file that does not filter command parameters. No details of...
CVE-2025-25635
TOTOlink A3002R V1.1.1-B20200824.0128 contains a buffer overflow vulnerability. The vulnerability arises from the improper input validation of the pppoedns1 parameter in the formIpv6Setup interface of /bin/boa...
CVE-2025-25610
TOTOlink A3002R V1.1.1-B20200824.0128 contains a buffer overflow vulnerability. The vulnerability arises from the improper input validation of the staticgw parameter in the formIpv6Setup interface of /bin/boa...
CVE-2025-25635
TOTOlink A3002R V1.1.1-B20200824.0128 contains a buffer overflow vulnerability. The vulnerability arises from the improper input validation of the pppoedns1 parameter in the formIpv6Setup interface of /bin/boa...