CVE-2025-5904

A vulnerability was found in TOTOLINK T10 4.1.8cu.5207. It has been declared as critical. Affected by this vulnerability is the function setWiFiMeshName of the file /cgi-bin/cstecgi.cgi of the component POST Request Handler. The manipulation of the argument devicename leads to buffer overflow. Th...

CVE-2025-5904

creationtimestamp| type| source ---|---|--- 2025-06-10 00:30:26+00:00| published-proof-of-concept| Telegram/16OLIDePbhu49HruwR-2aUaYd54Ib3eaMMHyowftNxSol8 2025-06-10 00:33:03+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17812 2025-06-10 01:33:50+00:00| seen|...

CVE-2025-5904

A vulnerability was found in TOTOLINK T10 4.1.8cu.5207. It has been declared as critical. Affected by this vulnerability is the function setWiFiMeshName of the file /cgi-bin/cstecgi.cgi of the component POST Request Handler. The manipulation of the argument devicename leads to buffer overflow. Th...

CVE-2025-5904 TOTOLINK T10 POST Request cstecgi.cgi setWiFiMeshName buffer overflow

A vulnerability was found in TOTOLINK T10 4.1.8cu.5207. It has been declared as critical. Affected by this vulnerability is the function setWiFiMeshName of the file /cgi-bin/cstecgi.cgi of the component POST Request Handler. The manipulation of the argument devicename leads to buffer overflow. Th...

CVE-2025-5904 TOTOLINK T10 POST Request cstecgi.cgi setWiFiMeshName buffer overflow

A vulnerability was found in TOTOLINK T10 4.1.8cu.5207. It has been declared as critical. Affected by this vulnerability is the function setWiFiMeshName of the file /cgi-bin/cstecgi.cgi of the component POST Request Handler. The manipulation of the argument devicename leads to buffer overflow. Th...

CVE-2025-5904

The CVE-2025-5904 entry concerns TOTOLINK T10 (firmware 4.1.8cu.5207). The vulnerable component is the POST Request Handler function setWiFiMeshName in /cgi-bin/cstecgi.cgi, where manipulating the device_name argument triggers a buffer overflow. This can be exploited remotely and impacts confiden...