CVE-2025-4268mediumCWE-287CWE-306

CVE-2025-4268: falha de média gravidade em TOTOLINK A720R

TOTOLINK A720R cstecgi.cgi missing authentication

Publicada em

Seguir esta CVE+ Monitorar A720R

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 6.9epss 1.1%
A vulnerability has been found in TOTOLINK A720R 4.1.5cu.374 and classified as critical. This vulnerability affects unknown code of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument topicurl with the input RebootSystem leads to missing authentication. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
Produtos afetados
TOTOLINK · A720R
CVEs relacionadas — TOTOLINK A720R

No mesmo produto, das mais perigosas para as menos.

CVE-2025-4270MEDIUMTOTOLINK A720R Config cstecgi.cgi information disclosureEPSS 14.0%CVE-2024-8869LOWTOTOLINK A720R exportOvpn os command injectionEPSS 1.7%CVE-2025-9303HIGHTOTOLINK A720R cstecgi.cgi setParentalRules buffer overflowEPSS 0.9%CVE-2026-82539CRITICALTOTOLINK A720R MAC Filtering cstecgi.cgi setMacFilterRules memory corruptionEPSS 0.8%CVE-2025-4271MEDIUMTOTOLINK A720R cstecgi.cgi information disclosureEPSS 0.7%CVE-2025-4269MEDIUMTOTOLINK A720R Log cstecgi.cgi access controlEPSS 0.6%