CVE-2026-5854

A vulnerability was detected in Totolink A7100RU 7.4cu.2313b20191024. Affected by this issue is the function setWiFiEasyCfg of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. Performing a manipulation of the argument merge results in os command injection. It is possible to initiate th...

CVE-2026-5854: Improper Neutralization of Special Elements used in an OS Command

A vulnerability was detected in Totolink A7100RU 7.4cu.2313b20191024. Affected by this issue is the function setWiFiEasyCfg of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. Performing a manipulation of the argument merge results in os command injection. It is possible to initiate th...

PT-2026-31593

Name of the Vulnerable Software and Affected Versions Totolink A7100RU version 7.4cu.2313 b20191024 Description A vulnerability exists in the Totolink A7100RU device that allows for remote operating system command injection. This is due to a flaw in the setWiFiEasyCfg function within the...

CVE-2026-1157

A vulnerability was identified in Totolink LR350 9.3.5u.6369B20220309. This affects the function setWiFiEasyCfg of the file /cgi-bin/cstecgi.cgi. Such manipulation of the argument ssid leads to buffer overflow. It is possible to launch the attack remotely. The exploit is publicly available and...

The vulnerability of the setWiFiEasyCfg() function in the cgi-bin/cstecgi.cgi script of the TOTOLINK LR350 router’s microprogramming software allows a hacker to induce a service failure.

The vulnerability of the setWiFiEasyCfg function in the cgi-bin/cstecgi.cgi script of the TOTOLINK LR350 router’s microprogramming system is related to the issue of data being written outside the buffer in memory when processing the ssid parameter. Exploiting this vulnerability could allow an...

CVE-2026-1157

A vulnerability was identified in Totolink LR350 9.3.5u.6369B20220309. This affects the function setWiFiEasyCfg of the file /cgi-bin/cstecgi.cgi. Such manipulation of the argument ssid leads to buffer overflow. It is possible to launch the attack remotely. The exploit is publicly available and...

CVE-2026-1157

CVE-2026-1157 affects Totolink LR350 9.3.5u.6369_B20220309. The vulnerability is in function setWiFiEasyCfg of /cgi-bin/cstecgi.cgi, where manipulating the ssid parameter can trigger a buffer overflow. It is exploitable remotely and the exploit is publicly available. Multiple feeds corroborate th...

CVE-2026-1157 Totolink LR350 cstecgi.cgi setWiFiEasyCfg buffer overflow

A vulnerability was identified in Totolink LR350 9.3.5u.6369B20220309. This affects the function setWiFiEasyCfg of the file /cgi-bin/cstecgi.cgi. Such manipulation of the argument ssid leads to buffer overflow. It is possible to launch the attack remotely. The exploit is publicly available and...

EUVD-2026-3215

A vulnerability was identified in Totolink LR350 9.3.5u.6369B20220309. This affects the function setWiFiEasyCfg of the file /cgi-bin/cstecgi.cgi. Such manipulation of the argument ssid leads to buffer overflow. It is possible to launch the attack remotely. The exploit is publicly available and...

CVE-2026-1157: Buffer Copy without Checking Size of Input

A vulnerability was identified in Totolink LR350 9.3.5u.6369B20220309. This affects the function setWiFiEasyCfg of the file /cgi-bin/cstecgi.cgi. Such manipulation of the argument ssid leads to buffer overflow. It is possible to launch the attack remotely. The exploit is publicly available and...

CVE-2025-45842

TOTOLINK NR1800X V9.1.0u.6681B20230703 was discovered to contain an authenticated stack overflow via the ssid5g parameter in the setWiFiEasyCfg function...

CVE-2025-45842

Summary: CVE-2025-45842 affects TOTOLINK NR1800X. The vulnerability is an authenticated stack overflow in the setWiFiEasyCfg function, triggered by the ssid5g parameter, with input length not properly validated. Affected firmware is 9.1.0u.6681_B20230703. Reported impact is high (CVE/NVD metrics ...

CVE-2025-45842

TOTOLINK NR1800X V9.1.0u.6681B20230703 was discovered to contain an authenticated stack overflow via the ssid5g parameter in the setWiFiEasyCfg function...

CVE-2025-45842: Out-of-bounds Write

TOTOLINK NR1800X V9.1.0u.6681B20230703 was discovered to contain an authenticated stack overflow via the ssid5g parameter in the setWiFiEasyCfg function...

CVE-2025-3663

A vulnerability, which was classified as critical, has been found in TOTOLINK A3700R 9.1.2u.5822B20200513. This issue affects the function setWiFiEasyCfg/setWiFiEasyGuestCfg of the file /cgi-bin/cstecgi.cgi of the component Password Handler. The manipulation leads to improper access controls. The...

CVE-2025-3663: Improper Access Control

A vulnerability, which was classified as critical, has been found in TOTOLINK A3700R 9.1.2u.5822B20200513. This issue affects the function setWiFiEasyCfg/setWiFiEasyGuestCfg of the file /cgi-bin/cstecgi.cgi of the component Password Handler. The manipulation leads to improper access controls. The...

TOTOLINK A3700R setWiFiEasyCfg Function Buffer Overflow Vulnerability

The TOTOLINK A3700R is a wireless router from China's Gion Electronics TOTOLINK. The TOTOLINK A3700R suffers from a buffer overflow vulnerability that originates from the ssid in the function setWiFiEasyCfg failing to properly validate the length and size of the input data, which can be exploited...

CVE-2024-37634

TOTOLINK A3700R V9.1.2u.616520211012 was discovered to contain a stack overflow via ssid in the function setWiFiEasyCfg...

CVE-2024-37634

TOTOLINK A3700R V9.1.2u.616520211012 was discovered to contain a stack overflow via ssid in the function setWiFiEasyCfg...

CVE-2024-37634

The TOTOLINK A3700R wireless router, specifically version V9.1.2u.6165_20211012 , is vulnerable to a stack-based buffer overflow in the setWiFiEasyCfg() function. This flaw occurs because the software fails to properly validate the length and size of input data provided via the ssid parameter, al...