by Kastro
Paper/Archive/CVE-2026-124057

CVE-2026-124057

TOTOLINK CA300-PoE — TOTOLINK CA300-PoE cstecgi.cgi setWiFiMultipleConfig buffer overflow

CVSS 9.4
critical.is priorityof 100
28
CVSS 9.4 (CNA)9.4 / 10 × 3028.2Not in CISA KEV+300.0No EPSS score.000 × 200.0No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

A security flaw has been discovered in TOTOLINK CA300-PoE 6.2c.884. This impacts the function setWiFiMultipleConfig of the file /cgi-bin/cstecgi.cgi. Performing a manipulation of the argument Key1Str1 results in buffer overflow. The attack can be initiated remotely. The exploit has been released to the public and may be used for attacks.

Affected

ProductAffectedFixed inSource
CA300-PoE6.2c.884–CNA

Scores by source

VulDB (CNA)9.4CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P
VulDB (CNA)9.1CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H/E:P/RL:X/RC:C
VulDB (CNA)9.1CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H/E:P/RL:X/RC:C

References

writeupvuldb.com/vuln/432112refvuldb.com/vuln/432112/ctiwriteupvuldb.com/cve/CVE-2026-124057writeupvuldb.com/submit/1033754exploitlavender-bicycle-a5a.notion.site/TOTOLINK-CA300-PoE-setWiFiMultipleConfig-3f953a41781f800fab65eaa6a2887fa1?source=copy_linkreftotolink.net