TOTOLINK T10/A3100R/A950RG/A800R/N600R/A3000RU/A810R cstecgi.cgi CloudACMunualUpdate buffer overflow
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| TOTOLINK | T10 | affected |
|
||||||
| TOTOLINK | A3100R | affected |
|
||||||
| TOTOLINK | A950RG | affected |
|
||||||
| TOTOLINK | A800R | affected |
|
||||||
| TOTOLINK | N600R | affected |
|
||||||
| TOTOLINK | A3000RU | affected |
|
||||||
| TOTOLINK | A810R | affected |
|
Configuration 1 [-]
| AND |
|
Configuration 2 [-]
| AND |
|
Configuration 3 [-]
| AND |
|
Configuration 4 [-]
| AND |
|
Configuration 5 [-]
| AND |
|
Configuration 6 [-]
| AND |
|
Configuration 7 [-]
| AND |
|
No data.
| Vendor | Product | Versions |
|---|---|---|
| Totolink | A3000ru | — |
| Totolink | A3100r | — |
| Totolink | A800r | — |
| Totolink | A810r | — |
| Totolink | A950rg | — |
| Totolink | N600r | — |
| Totolink | T10 | — |
| Source | ID | Title |
|---|---|---|
EUVD |
EUVD-2025-14220 | A vulnerability was found in TOTOLINK T10, A3100R, A950RG, A800R, N600R, A3000RU and A810R 4.1.8cu.5241_B20210927. It has been declared as critical. This vulnerability affects the function CloudACMunualUpdate of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument FileName leads to buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. |
This CVE is not in the KEV list.
Exploit prediction score: 1.3% (1.253% probability within 30 days)
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Totolink a3000ru Firmware
Totolink a3100r Firmware Totolink a800r Firmware Totolink a810r Firmware Totolink a950rg Firmware Totolink n600r Firmware Totolink t10 Firmware |
|
| CPEs | cpe:2.3:h:totolink:a3000ru:-:*:*:*:*:*:*:* cpe:2.3:h:totolink:a3100r:-:*:*:*:*:*:*:* cpe:2.3:h:totolink:a800r:-:*:*:*:*:*:*:* cpe:2.3:h:totolink:a810r:-:*:*:*:*:*:*:* cpe:2.3:h:totolink:a950rg:-:*:*:*:*:*:*:* cpe:2.3:h:totolink:n600r:-:*:*:*:*:*:*:* cpe:2.3:h:totolink:t10:-:*:*:*:*:*:*:* cpe:2.3:o:totolink:a3000ru_firmware:4.1.8cu.5241_b20210927:*:*:*:*:*:*:* cpe:2.3:o:totolink:a3100r_firmware:4.1.8cu.5241_b20210927:*:*:*:*:*:*:* cpe:2.3:o:totolink:a800r_firmware:4.1.8cu.5241_b20210927:*:*:*:*:*:*:* cpe:2.3:o:totolink:a810r_firmware:4.1.8cu.5241_b20210927:*:*:*:*:*:*:* cpe:2.3:o:totolink:a950rg_firmware:4.1.8cu.5241_b20210927:*:*:*:*:*:*:* cpe:2.3:o:totolink:n600r_firmware:4.1.8cu.5241_b20210927:*:*:*:*:*:*:* cpe:2.3:o:totolink:t10_firmware:4.1.8cu.5241_b20210927:*:*:*:*:*:*:* |
|
| Vendors & Products |
Totolink a3000ru Firmware
Totolink a3100r Firmware Totolink a800r Firmware Totolink a810r Firmware Totolink a950rg Firmware Totolink n600r Firmware Totolink t10 Firmware |
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
ssvc
|
| Type | Values Removed | Values Added |
|---|---|---|
| Description | A vulnerability was found in TOTOLINK T10, A3100R, A950RG, A800R, N600R, A3000RU and A810R 4.1.8cu.5241_B20210927. It has been declared as critical. This vulnerability affects the function CloudACMunualUpdate of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument FileName leads to buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. | |
| Title | TOTOLINK T10/A3100R/A950RG/A800R/N600R/A3000RU/A810R cstecgi.cgi CloudACMunualUpdate buffer overflow | |
| Weaknesses | CWE-119 CWE-120 |
|
| References |
| |
| Metrics |
cvssV2_0
|