CVE-2025-2370: TOTOLINK EX1800T cstecgi.cgi setWiFiExtenderConfig stack-based overflow
A vulnerability was found in TOTOLINK EX1800T up to 9.1.0cu.2112B20220316. It has been declared as critical. Affected by this vulnerability is the function setWiFiExtenderConfig of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument apcliSsid leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-2370?
CVE-2025-2370 has been declared as critical due to its potential impact on device security.
How do I fix CVE-2025-2370?
To address CVE-2025-2370, users should update their TOTOLINK EX1800T devices to a version later than 9.1.0cu.2112_B20220316.
What type of vulnerability is CVE-2025-2370?
CVE-2025-2370 is a stack-based buffer overflow vulnerability affecting the setWiFiExtenderConfig function.
Which devices are affected by CVE-2025-2370?
CVE-2025-2370 affects the TOTOLINK EX1800T device running version 9.1.0cu.2112_B20220316 and earlier.
How can CVE-2025-2370 be exploited?
CVE-2025-2370 can be exploited by manipulating the apcliSsid argument, leading to potential execution of arbitrary code.