EUVD-2025-18434
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Lifecycle Timeline
4Description
A vulnerability classified as critical was found in TOTOLINK T10 4.1.8cu.5207. Affected by this vulnerability is the function setWizardCfg of the file /cgi-bin/cstecgi.cgi of the component HTTP POST Request Handler. The manipulation of the argument ssid5g leads to buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
Analysis
Critical buffer overflow vulnerability in TOTOLINK T10 firmware version 4.1.8cu.5207 affecting the HTTP POST request handler. An authenticated attacker can remotely exploit the setWizardCfg function via the ssid5g parameter to achieve buffer overflow, resulting in complete system compromise including confidentiality, integrity, and availability breaches. Public exploit code has been disclosed and the vulnerability meets criteria for active exploitation risk.
Technical Context
The vulnerability exists in the cstecgi.cgi CGI binary, which processes HTTP POST requests for wireless router configuration. The setWizardCfg function fails to properly validate the length of the ssid5g input parameter before copying it into a fixed-size stack buffer, resulting in a classic stack-based buffer overflow (CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer). The affected component handles wireless SSID configuration for 5GHz band settings in the TOTOLINK T10 wireless router. This is a network-facing service running on the device's embedded HTTP server, making it remotely accessible to authenticated users or potentially unauthenticated users depending on authentication bypass conditions.
Affected Products
TOTOLINK T10 wireless router firmware version 4.1.8cu.5207. CPE identification: cpe:2.3:o:totolink:t10_firmware:4.1.8cu.5207:*:*:*:*:*:*:*. Additional firmware versions prior to patching are likely affected; specific patched version information requires vendor advisory consultation. TOTOLINK has not released publicly documented patches as of the CVE disclosure date.
Remediation
Immediate actions: (1) If patched firmware is available from TOTOLINK for T10 model, upgrade immediately via the device's firmware update mechanism or web interface; (2) If no patch exists, restrict network access to the device's HTTP interface using firewall rules, allowing only trusted administrative IPs; (3) Change default credentials and enforce strong passwords to reduce authenticated attack surface; (4) Consider isolating affected T10 devices on a separate administrative network segment; (5) Monitor vendor security advisories at https://www.totolink.net for patch releases. Check TOTOLINK's support page for firmware downloads and security bulletins. As a temporary mitigation, disable remote management features if not required and restrict access to port 80/443 at the network perimeter.
Priority Score
Share
External POC / Exploit Code
Leaving vuln.today