PT-2026-3394 · Totolink · Totolink A3700R

Wxhwxhwxh_Mie

·

CVE-2026-1143

·

Publicado

2026-01-09

·

Atualizado

2026-01-29

CVSS v2.0

9.0

Alta

VetorAV:N/AC:L/Au:S/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions TOTOLINK A3700R version 9.1.2u.5822 B20200513
Description A flaw exists in TOTOLINK A3700R. A buffer overflow can occur through manipulation of the ssid argument within the setWiFiEasyGuestCfg function located in the /cgi-bin/cstecgi.cgi file. This issue may be exploited remotely. The exploit has been publicly released.
Recommendations TOTOLINK A3700R version 9.1.2u.5822 B20200513: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Buffer Overflow

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-119CWE-120

Identificadores relacionados

BDU:2026-00629
CVE-2026-1143

Produtos afetados

Totolink A3700R