CVE-2025-11444highCWE-119CWE-120

CVE-2025-11444: falha de alta gravidade em TOTOLINK N600R

TOTOLINK N600R HTTP Request cstecgi.cgi setWiFiBasicConfig buffer overflow

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar N600R

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

21Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 8.7epss 1.1%
A security vulnerability has been detected in TOTOLINK N600R up to 4.3.0cu.7866_B20220506. This impacts the function setWiFiBasicConfig of the file /cgi-bin/cstecgi.cgi of the component HTTP Request Handler. Such manipulation of the argument wepkey leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed publicly and may be used.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P
Produtos afetados
TOTOLINK · N600R
CVEs relacionadas — TOTOLINK N600R

No mesmo produto, das mais perigosas para as menos.

CVE-2025-9935MEDIUMTOTOLINK N600R cstecgi.cgi sub_4159F8 command injectionEPSS 2.7%CVE-2026-79912MEDIUMTOTOLINK N600R cstecgi.cgi getCurrentTime command injectionEPSS 2.1%CVE-2025-4496HIGHTOTOLINK T10/A3100R/A950RG/A800R/N600R/A3000RU/A810R cstecgi.cgi CloudACMunualUpdate buffer overflowEPSS 1.2%CVE-2025-8181HIGHTOTOLINK N600R/X2000R FTP Service vsftpd.conf least privilege violationEPSS 1.1%CVE-2026-79911CRITICALTOTOLINK N600R CGI cstecgi.cgi setSystemConfig stack-based overflowEPSS 1.1%CVE-2026-82555MEDIUMTOTOLINK N600R Authentication cstecgi.cgi loginAuth random valuesEPSS 0.7%