CVE-2025-4268

A vulnerability has been found in TOTOLINK A720R 4.1.5cu.374 and classified as critical. This vulnerability affects unknown code of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument topicurl with the input RebootSystem leads to missing authentication. The attack can be initiated...

CVE-2025-4268

creationtimestamp| type| source ---|---|--- 2025-05-05 07:19:25+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/14841 2025-05-05 10:21:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3log5hxglf42e 2025-05-05 11:41:46+00:00| seen|...

CVE-2025-4268

The CVE-2025-4268 entry applies to TOTOLINK A720R firmware 4.1.5cu.374, where an improper authentication flaw exists in /cgi-bin/cstecgi.cgi. The vulnerability arises from manipulating the topicurl parameter with the value RebootSystem, enabling remote exploitation without authentication. Multipl...

CVE-2025-4268 TOTOLINK A720R cstecgi.cgi missing authentication

A vulnerability has been found in TOTOLINK A720R 4.1.5cu.374 and classified as critical. This vulnerability affects unknown code of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument topicurl with the input RebootSystem leads to missing authentication. The attack can be initiated...