← Database

CVE-2025-2369

HIGH CVSS: 8.8 Published: 2025-03-17 Modified: 2026-06-17

Description

A vulnerability was found in TOTOLINK EX1800T up to 9.1.0cu.2112_B20220316. It has been classified as critical. Affected is the function setPasswordCfg of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument admpass leads to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.

Affected Platforms

Totolink Ex1800TTotolink Ex1800T Firmware

Weakness Type

CWE-119, CWE-121, CWE-787

References