CVE-2025-7758

A vulnerability, which was classified as critical, has been found in TOTOLINK T6 up to 4.1.5cu.748B20211015. Affected by this issue is the function setDiagnosisCfg of the file /cgi-bin/cstecgi.cgi of the component HTTP POST Request Handler. The manipulation of the argument ip leads to buffer...

CVE-2025-7758

The CVE-2025-7758 issue affects TOTOLINK T6 firmware (versions prior to 4.1.5cu.748_B20211015). The vulnerability is in the HTTP POST Request Handler, specifically the setDiagnosisCfg function in /cgi-bin/cstecgi.cgi, where manipulating the ip argument leads to a buffer overflow. This can be expl...

CVE-2025-7758 TOTOLINK T6 HTTP POST Request cstecgi.cgi setDiagnosisCfg buffer overflow

A vulnerability, which was classified as critical, has been found in TOTOLINK T6 up to 4.1.5cu.748B20211015. Affected by this issue is the function setDiagnosisCfg of the file /cgi-bin/cstecgi.cgi of the component HTTP POST Request Handler. The manipulation of the argument ip leads to buffer...

CVE-2025-7758 TOTOLINK T6 HTTP POST Request cstecgi.cgi setDiagnosisCfg buffer overflow

A vulnerability, which was classified as critical, has been found in TOTOLINK T6 up to 4.1.5cu.748B20211015. Affected by this issue is the function setDiagnosisCfg of the file /cgi-bin/cstecgi.cgi of the component HTTP POST Request Handler. The manipulation of the argument ip leads to buffer...

CVE-2025-52046

Totolink A3300R V17.0.0cu.596B20250515 was found to contain a command injection vulnerability in the sub4197C0 function via the mac and desc parameters. This vulnerability allows unauthenticated attackers to execute arbitrary commands via a crafted request...

CVE-2025-52046

Totolink A3300R V17.0.0cu.596B20250515 was found to contain a command injection vulnerability in the sub4197C0 function via the mac and desc parameters. This vulnerability allows unauthenticated attackers to execute arbitrary commands via a crafted request...

CVE-2025-51630

TOTOLINK N350RT V9.3.5u.6139B20201216 was discovered to contain a buffer overflow via the ePort parameter in the function setIpPortFilterRules...

CVE-2025-51630

TOTOLINK N350RT V9.3.5u.6139B20201216 was discovered to contain a buffer overflow via the ePort parameter in the function setIpPortFilterRules...

TOTOLINK N350RT 安全漏洞

The TOTOLINK N350RT is a small home router from China's Gion Electronics TOTOLINK. A buffer overflow vulnerability exists in the TOTOLINK N350RT version V9.3.5u.6139B20201216, which stems from the ePort parameter failing to correctly validate the length and size of the input data, and can be...

CVE-2025-51630

TOTOLINK N350RT V9.3.5u.6139B20201216 was discovered to contain a buffer overflow via the ePort parameter in the function setIpPortFilterRules...

PT-2025-30164 · Totolink · Totolink T6

Name of the Vulnerable Software and Affected Versions: TOTOLINK T6 version 4.1.5cu.748 B20211015 Description: A critical issue exists in the Telnet Service of TOTOLINK T6. The setTelnetCfg function within the /cgi-bin/cstecgi.cgi file is susceptible to missing authentication due to the manipulati...

TOTOLINK T6 安全漏洞

TOTOLINK T6 is a wireless dual-band router from China's TOTOLINK Electronics TOTOLINK that supports MQTT protocol and Telnet service. The TOTOLINK T6 suffers from a buffer overflow vulnerability, which originates from the parameter ip in the file /cgi-bin/cstecgi.cgi that fails to correctly...

PT-2025-29909 · Totolink · Totolink N350Rt

Name of the Vulnerable Software and Affected Versions: TOTOLINK N350RT version 9.3.5u.6139 B20201216 Description: A buffer overflow exists in TOTOLINK N350RT due to a flaw in the setIpPortFilterRules function when handling the ePort parameter. Recommendations: TOTOLINK N350RT version 9.3.5u.6139...

TOTOLINK A3300R 安全漏洞

TOTOLINK A3300R is a wireless router from China's Gion Electronics TOTOLINK. A command injection vulnerability exists in the TOTOLINK A3300R version V17.0.0cu.596B20250515, which stems from the mac and desc parameters failing to correctly filter constructed command special characters, commands, a...

PT-2025-29926 · Totolink · Totolink A3300R

Name of the Vulnerable Software and Affected Versions: Totolink A3300R version V17.0.0cu.596 B20250515 Description: Totolink A3300R V17.0.0cu.596 B20250515 contains a command injection vulnerability in the sub 4197C0 function. This allows unauthenticated attackers to execute arbitrary commands vi...

CVE-2025-51630

Affected product/firmware : TOTOLINK N350RT, version 9.3.5u.6139_B20201216. Vulnerability : Buffer overflow in the function setIpPortFilterRules when processing the ePort parameter. The issue arises from improper validation of the input length/size, enabling a remote attacker to potentially execu...

PT-2025-30147 · Totolink · Totolink T6

Name of the Vulnerable Software and Affected Versions: TOTOLINK T6 version 4.1.5cu.748 B20211015 Description: A critical vulnerability exists in the MQTT Service component of the affected software. The recvSlaveStaInfo function is susceptible to a buffer overflow due to manipulation of the dest...

CVE-2025-51630

TOTOLINK N350RT V9.3.5u.6139B20201216 was discovered to contain a buffer overflow via the ePort parameter in the function setIpPortFilterRules...

EUVD-2025-21783

Totolink A3300R V17.0.0cu.596B20250515 was found to contain a command injection vulnerability in the sub4197C0 function via the mac and desc parameters. This vulnerability allows unauthenticated attackers to execute arbitrary commands via a crafted request...

CVE-2025-52046

Totolink A3300R V17.0.0cu.596B20250515 was found to contain a command injection vulnerability in the sub4197C0 function via the mac and desc parameters. This vulnerability allows unauthenticated attackers to execute arbitrary commands via a crafted request...