30 matches found
CVE-2026-1157 Totolink LR350 cstecgi.cgi setWiFiEasyCfg buffer overflow
A vulnerability was identified in Totolink LR350 9.3.5u.6369B20220309. This affects the function setWiFiEasyCfg of the file /cgi-bin/cstecgi.cgi. Such manipulation of the argument ssid leads to buffer overflow. It is possible to launch the attack remotely. The exploit is publicly available and...
CVE-2025-45842
TOTOLINK NR1800X V9.1.0u.6681B20230703 was discovered to contain an authenticated stack overflow via the ssid5g parameter in the setWiFiEasyCfg function...
CVE-2025-45842
TOTOLINK NR1800X V9.1.0u.6681B20230703 was discovered to contain an authenticated stack overflow via the ssid5g parameter in the setWiFiEasyCfg function...
CVE-2025-45842
Summary: CVE-2025-45842 affects TOTOLINK NR1800X. The vulnerability is an authenticated stack overflow in the setWiFiEasyCfg function, triggered by the ssid5g parameter, with input length not properly validated. Affected firmware is 9.1.0u.6681_B20230703. Reported impact is high (CVE/NVD metrics ...
CVE-2025-3663
A vulnerability, which was classified as critical, has been found in TOTOLINK A3700R 9.1.2u.5822B20200513. This issue affects the function setWiFiEasyCfg/setWiFiEasyGuestCfg of the file /cgi-bin/cstecgi.cgi of the component Password Handler. The manipulation leads to improper access controls. The...
TOTOLINK A3700R setWiFiEasyCfg Function Buffer Overflow Vulnerability
The TOTOLINK A3700R is a wireless router from China's Gion Electronics TOTOLINK. The TOTOLINK A3700R suffers from a buffer overflow vulnerability that originates from the ssid in the function setWiFiEasyCfg failing to properly validate the length and size of the input data, which can be exploited...
CVE-2024-37634
TOTOLINK A3700R V9.1.2u.616520211012 was discovered to contain a stack overflow via ssid in the function setWiFiEasyCfg...
CVE-2024-37634
CVE-2024-37634 affects TOTOLINK A3700R. The A3700R (firmware V9.1.2u.6165_20211012) has a stack overflow vulnerability in the setWiFiEasyCfg function triggered via the ssid field. The issue enables an attacker to cause a crash or execute arbitrary code on the device (buffer/stack overflow). CVSSv...