CVE-2025-1852: Totolink EX1800T cstecgi.cgi loginAuth buffer overflow
A vulnerability has been found in Totolink EX1800T 9.1.0cu.2112B20220316 and classified as critical. This vulnerability affects the function loginAuth of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument password leads to buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-1852?
CVE-2025-1852 is classified as a critical severity vulnerability.
How does CVE-2025-1852 affect the Totolink EX1800T?
CVE-2025-1852 affects the loginAuth function in the /cgi-bin/cstecgi.cgi file, leading to a buffer overflow condition.
What kind of attack can be initiated using CVE-2025-1852?
An attacker can leverage CVE-2025-1852 by manipulating the password argument to exploit the buffer overflow.
Is there a fix available for CVE-2025-1852?
To resolve CVE-2025-1852, users should update their Totolink EX1800T firmware to the latest version that has addressed this vulnerability.
What versions of Totolink EX1800T are affected by CVE-2025-1852?
CVE-2025-1852 affects the Totolink EX1800T version 9.1.0cu.2112_B20220316.