Vulnerability details

CVE-2025-5600

Totolink EX1200T

TOTOLINK EX1200T cstecgi.cgi setLanguageCfg stack-based overflow

CVSS 4.0

9.3Critical

Official description

A vulnerability, which was classified as critical, has been found in TOTOLINK EX1200T 4.1.2cu.5232_B20210713. This issue affects the function setLanguageCfg of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument LangType leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.

CVSS scores

Score	Version	Source	Vector
9.3Critical	4.0	CVEProject cvelistV5 (CNA) (VulDB)	`CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N`
9.8Critical	3.1	CVEProject cvelistV5 (CNA) (VulDB)	`CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H`
9.8Critical	3.0	CVEProject cvelistV5 (CNA) (VulDB)	`CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H`
10.0High	2.0	CVEProject cvelistV5 (CNA) (VulDB)	`AV:N/AC:L/Au:N/C:C/I:C/A:C`

Affected products

Vendor	Product	Versions	Source
Totolink	EX1200T	4.1.2cu.5232_B20210713	CVEProject cvelistV5 (CNA)

References and advisories

https://vuldb.com/?id.311087 vdb-entrytechnical-description
https://vuldb.com/?ctiid.311087 signaturepermissions-required
https://vuldb.com/?submit.588075 third-party-advisory
https://www.totolink.net/ product
https://kn0sinna.notion.site/TOTOLINK-EX1200T-stack-based-BufferOverflow-vulnerability-204b1876cd6e80709ce8dab4778dce55 exploit

Kolun on Telegram @kolunsec Exploited CVEs, key news and a daily digest Alerts for this product's next CVEsFollow the product to get new vulnerabilities on Telegram.

Details

Published: 2025-06-04
Last updated: 2025-06-04
State: Published
Assigner (CNA): VulDB

Exploit prediction (EPSS)

1.34%

Probability of exploitation in 30 days

71.5%

Percentile (among all CVEs)

SSVC assessment (CISA)

Automatable: Yes
Exploitation: Proof of concept
Technical impact: Total

Weaknesses (CWE)

CWE-121
Stack-based Buffer Overflow
CWE-119
Memory Corruption