CVE-2026-75013: TOTOLINK EX1200L cstecgi.cgi setWizardCfg null pointer dereference
A vulnerability was detected in TOTOLINK EX1200L 9.3.5u.6146B20201023. This affects the function setWizardCfg of the file /cgi-bin/cstecgi.cgi. The manipulation results in null pointer dereference. The attack can be launched remotely. The exploit is now public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-75013?
The severity of CVE-2026-75013 is medium with a score of 6.5.
What type of vulnerability is CVE-2026-75013?
CVE-2026-75013 is categorized as a null pointer dereference vulnerability.
How can an attacker exploit CVE-2026-75013?
An attacker can exploit CVE-2026-75013 remotely by manipulating the setWizardCfg function of the cstecgi.cgi file.
What impact does CVE-2026-75013 have on affected systems?
The impact of CVE-2026-75013 can result in a null pointer dereference, potentially causing denial of service.
How do I fix CVE-2026-75013?
To mitigate CVE-2026-75013, it is recommended to update your TOTOLINK EX1200L devices to the latest firmware version that addresses this vulnerability.