CVE-2026-123960: TOTOLINK CA300-PoE cstecgi.cgi setWanConfig buffer overflow
A weakness has been identified in TOTOLINK CA300-PoE 6.2c.884. This affects the function setWanConfig of the file /cgi-bin/cstecgi.cgi. Executing a manipulation of the argument pppoeUser/priDns/secDns can lead to buffer overflow. The attack can be launched remotely. The exploit has been made available to the public and could be used for attacks.
Event History
Frequently Asked Questions
What access does an attacker need to exploit this issue?
The attack can be launched remotely. The available information does not state that authentication or local network access is required.
Which inputs are involved in the vulnerable code path?
The affected setWanConfig function in /cgi-bin/cstecgi.cgi processes the pppoeUser, priDns, and secDns arguments. Manipulating these arguments can trigger the buffer overflow.
Is exploit code available?
Yes. A public exploit has been made available, so attempts to exploit affected devices may be more likely.