CVE-2026-121598: TOTOLINK A950RG Basic Wireless Configuration cstecgi.cgi strcpy stack-based overflow
A security vulnerability has been detected in TOTOLINK A950RG 4.1.2cu.5268B20221104. This impacts the function strcpy of the file /cgi-bin/cstecgi.cgi of the component Basic Wireless Configuration Handler. The manipulation of the argument wepkey leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed publicly and may be used.
Event History
Frequently Asked Questions
What access does an attacker need to exploit this issue?
The attack can be initiated remotely, but the CVSS vector indicates low privileges are required. No user interaction is required.
Which systems are known to be affected?
The affected product and version identified in the available data is TOTOLINK A950RG firmware 4.1.2cu.5268_B20221104. The vulnerable code is the Basic Wireless Configuration Handler in /cgi-bin/cstecgi.cgi.
What input is involved in the overflow?
The stack-based buffer overflow is triggered by manipulating the wepkey argument passed to the Basic Wireless Configuration Handler. The vulnerable function is strcpy.
How urgent is remediation?
This is rated high severity with a CVSS score of 8.6 and can affect confidentiality, integrity, and availability. A public exploit has been disclosed, increasing the likelihood of attempted exploitation.