CVE-2025-11444: TOTOLINK N600R HTTP Request cstecgi.cgi setWiFiBasicConfig buffer overflow
A security vulnerability has been detected in TOTOLINK N600R up to 4.3.0cu.7866B20220506. This impacts the function setWiFiBasicConfig of the file /cgi-bin/cstecgi.cgi of the component HTTP Request Handler. Such manipulation of the argument wepkey leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed publicly and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-11444?
CVE-2025-11444 is classified as a critical severity vulnerability due to its potential to lead to buffer overflow exploitation.
How do I fix CVE-2025-11444?
To mitigate CVE-2025-11444, update the TOTOLINK N600R firmware to a version beyond 4.3.0cu.7866_B20220506.
What components are impacted by CVE-2025-11444?
CVE-2025-11444 affects the HTTP Request Handler specifically in the setWiFiBasicConfig function within the cgi-bin/cstecgi.cgi file.
What are the consequences of exploiting CVE-2025-11444?
Exploitation of CVE-2025-11444 can allow an attacker to execute arbitrary code on the affected device.
Is CVE-2025-11444 a widespread vulnerability?
CVE-2025-11444 impacts all versions of the TOTOLINK N600R up to and including 4.3.0cu.7866_B20220506, making it a significant concern for users of this device.