EUVD-2025-17608
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Lifecycle Timeline
4Description
A vulnerability was found in TOTOLINK T10 4.1.8cu.5207. It has been rated as critical. Affected by this issue is the function setWiFiRepeaterCfg of the file /cgi-bin/cstecgi.cgi of the component POST Request Handler. The manipulation of the argument Password leads to buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
Analysis
Critical buffer overflow vulnerability in TOTOLINK T10 firmware version 4.1.8cu.5207 affecting the WiFi repeater configuration function. An authenticated remote attacker can exploit this vulnerability by sending a malicious POST request with an oversized Password parameter to /cgi-bin/cstecgi.cgi, achieving complete compromise of the device including arbitrary code execution. Public disclosure and proof-of-concept code availability significantly elevate real-world risk despite requiring authenticated access.
Technical Context
The vulnerability exists in the setWiFiRepeaterCfg function within the POST Request Handler component of TOTOLINK's web interface. The root cause is classified under CWE-119 (Improper Restriction of Operations within the Bounds of a Memory Buffer), indicating inadequate input validation and buffer bounds checking on the Password parameter. The affected component is a CGI script (/cgi-bin/cstecgi.cgi) that processes HTTP POST requests for WiFi repeater configuration. TOTOLINK T10 is a wireless router/repeater device running firmware version 4.1.8cu.5207. The buffer overflow occurs because the application fails to properly validate the length of user-supplied input before copying it into a fixed-size buffer, allowing stack or heap corruption depending on the buffer location.
Affected Products
T10 (['4.1.8cu.5207'])
Priority Score
Share
External POC / Exploit Code
Leaving vuln.today