CVE-2025-5600CWE-119CWE-121

TOTOLINK EX1200T cstecgi.cgi setLanguageCfg stack-based overflow

Critical · published June 4, 2025

CVSS v4.0
9.3
EPSS
1%
Percentile
68.6
In the wild
Unconfirmed
What it is

🚨 A seemingly innocent language setting can lead to a critical stack-based buffer overflow in the TOTOLINK EX1200T! 🔥 Think of this vulnerability like a restaurant where a single too-large order is accepted at the counter, causing the entire system to crash when the kitchen can't handle the demand. This overflow can wreak havoc on your router's functionality! An attacker could trigger this vulnerability from afar, potentially leading to unauthorized access or even full control over the device. That means they could intercept your network traffic, manipulate your settings, or disrupt your internet connectivity entirely. Yikes!

Put simply

Think of this vulnerability like a restaurant where a single too-large order is accepted at the counter, causing the entire system to crash when the kitchen can't handle the demand. This overflow can wreak havoc on your router's functionality! This critical vulnerability arises from improper handling of the LangType argument in the setLanguageCfg function, leading to a stack-based buffer overflow. Essentially, the router's software is overwhelmed by unexpected data, allowing attackers to execute arbitrary code.

What to do

An attacker could trigger this vulnerability from afar, potentially leading to unauthorized access or even full control over the device. That means they could intercept your network traffic, manipulate your settings, or disrupt your internet connectivity entirely. Yikes! Immediate action is crucial! Ensure you update your TOTOLINK EX1200T to the latest firmware version, and consider disabling remote management if it's not needed. Regularly check for updates to keep your device secure. You've got this! With these steps, you'll be back in the driver’s seat, securing your network in no time! 🛡️

The record
Technical detail
CVSS v4.0
9.3 · CRITICAL
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.01226 · 68.6th percentile
Weaknesses
CWE-119 · Improper Restriction of Operations within the Bounds of a Memory Buffer; CWE-121 · Stack-based Buffer Overflow
Published
2025-06-04T17:31Z
EPSS history
Timeline
  • 04 JUN 17:31Z
    TOTOLINK EX1200T cstecgi.cgi setLanguageCfg stack-based overflow
    cvelistv5