CVE-2025-11444 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

A security vulnerability has been detected in TOTOLINK N600R up to 4.3.0cu.7866_B20220506. This impacts the function setWiFiBasicConfig of the file /cgi-bin/cst…
High CVSS: 7.4

CVE-2025-11444

A security vulnerability has been detected in TOTOLINK N600R up to 4.3.0cu.7866_B20220506. This impacts the function setWiFiBasicConfig of the file /cgi-bin/cstecgi.cgi of the component HTTP Request Handler. Such manipulation of the argument wepkey leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed publicly and may be used.
Vendor
Totolink
Product
N600r Firmware
CWE
CWE-119
Yayın Tarihi
2025-10-08 08:15:32
Güncelleme
2025-10-14 20:16:01
Source Identifier
cna@vuldb.com
KEV Date Added
-

Kategoriler

CWE-119 N600r Firmware HIGH Totolink 2025

Referanslar

https://github.com/z472421519/BinaryAudit/blob/main/PoC/BOF/TOTOLINK/wepkey/wepkey.md https://github.com/z472421519/BinaryAudit/blob/main/PoC/BOF/TOTOLINK/wepkey/wepkey.md#reproduce https://vuldb.com/?ctiid.327381 https://vuldb.com/?id.327381 https://vuldb.com/?submit.666915 https://www.totolink.net/ https://github.com/z472421519/BinaryAudit/blob/main/PoC/BOF/TOTOLINK/wepkey/wepkey.md https://github.com/z472421519/BinaryAudit/blob/main/PoC/BOF/TOTOLINK/wepkey/wepkey.md#reproduce