Volerion logoVolerion
Volerion logoVolerion

Actively Exploited in the Wild

This vulnerability is being actively exploited in the wild.

TOTOLINK T10 Buffer Overflow Vulnerability in HTTP POST Request Handler

Vulnerability

A critical buffer overflow vulnerability has been identified in the TOTOLINK T10 router, specifically in the 4.1.8cu.5207 firmware version. The issue arises in the HTTP POST request handler, within the 'setWizardCfg' function of the '/cgi-bin/cstecgi.cgi' file. The vulnerability is triggered by manipulating the 'ssid5g' parameter, allowing for remote exploitation.

Impact

Exploitation of this vulnerability leads to a buffer overflow, which can commonly result in arbitrary code execution or causing the device to crash.

Added: Jun 16, 2025, 9:19 PM
Updated: Jun 16, 2025, 9:19 PM

Vulnerability Rating

Custom Algorithm
spread
0.0
impact
7.5
exploitability
9.1
remediation
0.0
relevance
0.2
threat
8.0
urgency
2.9
incentive
5.0

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.