CVE-2025-28024

TOTOLINK A810R V4.1.2cu.5182_B20201026 was found to contain a buffer overflow vulnerability in the cstecgi.cgi

Critical · published April 22, 2025

CVSS v3.1
9.8
EPSS
1%
Percentile
45.5
In the wild
Unconfirmed
What it is

🔥 A sneaky buffer overflow in the TOTOLINK A810R could let attackers execute arbitrary code—like a magician pulling a rabbit from a hat! 🐇 Think of the cstecgi.cgi file as a tightly packed suitcase. A buffer overflow is like stuffing too many clothes into that suitcase—eventually, it's going to burst open and spill everything out! An attacker could exploit this vulnerability to run any code on your router, potentially taking full control of your network. This could lead to unauthorized access to sensitive data or even redirecting your traffic, putting you at serious risk!

Put simply

Think of the cstecgi.cgi file as a tightly packed suitcase. A buffer overflow is like stuffing too many clothes into that suitcase—eventually, it's going to burst open and spill everything out! The buffer overflow vulnerability allows attackers to overflow a memory buffer in the cstecgi.cgi file, enabling them to execute arbitrary code on the device without proper authentication.

What to do

An attacker could exploit this vulnerability to run any code on your router, potentially taking full control of your network. This could lead to unauthorized access to sensitive data or even redirecting your traffic, putting you at serious risk! Immediately patch your TOTOLINK A810R to the latest software version to fix this vulnerability. Regularly review and apply firmware updates to maintain security and protect your network. 🛡️ You can tackle this! By acting quickly, you’ll keep your network secure and maintain hero status! 🦸‍♂️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00555 · 45.5th percentile
Published
2025-04-22T00:00Z
EPSS history
Timeline
  • 22 APR 00:00Z
    TOTOLINK A810R V4.1.2cu.5182_B20201026 was found to contain a buffer overflow vulnerability in the cstecgi.cgi
    cvelistv5