Unrated severityNVD Advisory· Published Mar 3, 2025· Updated Mar 3, 2025
Totolink EX1800T cstecgi.cgi loginAuth buffer overflow
CVE-2025-1852
Description
A vulnerability has been found in Totolink EX1800T 9.1.0cu.2112_B20220316 and classified as critical. This vulnerability affects the function loginAuth of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument password leads to buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
Affected products
2- Totolink/EX1800Tv5Range: 9.1.0cu.2112_B20220316
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
5- github.com/watermelon-happy/cve/blob/main/ex1800tCVE.mdmitreexploit
- vuldb.commitrethird-party-advisory
- vuldb.commitresignaturepermissions-required
- vuldb.commitrevdb-entrytechnical-description
- www.totolink.netmitreproduct
News mentions
0No linked articles in our index yet.