CVE-2025-2369: TOTOLINK EX1800T cstecgi.cgi setPasswordCfg stack-based overflow
A vulnerability was found in TOTOLINK EX1800T up to 9.1.0cu.2112B20220316. It has been classified as critical. Affected is the function setPasswordCfg of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument admpass leads to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-2369?
The severity of CVE-2025-2369 is classified as critical due to its potential for exploitation.
How do I fix CVE-2025-2369?
To fix CVE-2025-2369, users should update the firmware of TOTOLINK EX1800T to the latest version beyond 9.1.0cu.2112_B20220316.
What type of vulnerability is CVE-2025-2369?
CVE-2025-2369 is a stack-based buffer overflow vulnerability affecting the setPasswordCfg function in the device's CGI script.
Which devices are affected by CVE-2025-2369?
CVE-2025-2369 affects the TOTOLINK EX1800T router with firmware version up to 9.1.0cu.2112_B20220316.
Could CVE-2025-2369 allow for remote code execution?
Yes, CVE-2025-2369 could potentially allow for remote code execution due to the buffer overflow vulnerability.