CVE-2025-7460 | TOTOLINK T6 4.1.5cu.748_B20211015 HTTP POST Request /cgi-bin/cstecgi.cgi setWiFiAclRules mac buffer overflow

July 11, 2025 Yanac

A vulnerability has been found in TOTOLINK T6 4.1.5cu.748_B20211015 and classified as critical. Affected by this vulnerability is the function setWiFiAclRules of the file /cgi-bin/cstecgi.cgi of the component HTTP POST Request Handler. The manipulation of the argument mac leads to buffer overflow.

This vulnerability is known as CVE-2025-7460. The attack can be launched remotely. Furthermore, there is an exploit available.VulDB Recent EntriesRead More