TOTOLINK T10 Buffer Overflow Vulnerability in WiFi Mesh Name Setter
Vulnerability
A critical buffer overflow vulnerability has been identified in the TOTOLINK T10 router, specifically in the firmware version 4.1.8cu.5207. The issue arises in the POST request handler, within the function 'setWiFiMeshName' of the file '/cgi-bin/cstecgi.cgi'. The vulnerability is triggered by manipulating the 'device_name' argument, allowing for remote exploitation.
Impact
Exploitation of this vulnerability leads to a buffer overflow, which can commonly result in arbitrary code execution or causing the device to crash.
Added: Sep 1, 2025, 7:22 PM
Updated: Sep 1, 2025, 7:22 PM
Vulnerability Rating
Custom Algorithm
spread
0.0impact
7.5exploitability
6.6remediation
0.0relevance
0.2threat
6.4urgency
2.9incentive
0.8Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.