CVE-2025-4268 | TOTOLINK A720R 4.1.5cu.374 /cgi-bin/cstecgi.cgi topicurl missing authentication

May 4, 2025 Yanac

A vulnerability has been found in TOTOLINK A720R 4.1.5cu.374 and classified as critical. This vulnerability affects unknown code of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument topicurl with the input RebootSystem leads to missing authentication.

This vulnerability was named CVE-2025-4268. The attack can be initiated remotely. Furthermore, there is an exploit available.VulDB Recent EntriesRead More