CVE-2026-114383: TOTOLINK EX200 wireless.so cstecgi.cgi setWiFiAclAddConfig stack-based overflow
A weakness has been identified in TOTOLINK EX200 5.2.3c.7200. This impacts the function setWiFiAclAddConfig of the file /cgi-bin/cstecgi.cgi of the component wireless.so. This manipulation of the argument macAddress causes stack-based buffer overflow. The attack can be initiated remotely. The exploit has been made available to the public and could be used for attacks.
Affected Software
Event History
Frequently Asked Questions
What access does an attacker need to exploit this issue?
An attacker can initiate the attack remotely over the network. No privileges or user interaction are required according to the supplied vector.
Which systems should be treated as affected during triage?
TOTOLINK EX200 devices running firmware version 5.2.3c.7200 should be treated as affected. The provided data does not identify other versions or models.
Is exploit code available?
Yes. The exploit has been made publicly available, increasing the likelihood that the issue could be used in attacks.