CVE-2025-12241: TOTOLINK A3300R POST Parameter cstecgi.cgi setLanguageCfg stack-based overflow
A vulnerability was detected in TOTOLINK A3300R 17.0.0cu.557B20221024. This impacts the function setLanguageCfg of the file /cgi-bin/cstecgi.cgi of the component POST Parameter Handler. The manipulation of the argument lang results in stack-based buffer overflow. It is possible to launch the attack remotely. The exploit is now public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-12241?
CVE-2025-12241 has a high severity due to its potential for causing stack-based buffer overflow, resulting in unauthorized access or crashes.
How do I fix CVE-2025-12241?
To fix CVE-2025-12241, update the TOTOLINK A3300R firmware to the latest version that addresses this vulnerability.
What components are affected by CVE-2025-12241?
CVE-2025-12241 affects the setLanguageCfg function in the POST Parameter Handler of the /cgi-bin/cstecgi.cgi file.
What type of vulnerability is CVE-2025-12241?
CVE-2025-12241 is classified as a stack-based buffer overflow vulnerability.
Who is affected by CVE-2025-12241?
Users of the TOTOLINK A3300R router with the specified firmware version are affected by CVE-2025-12241.