CVE-2025-11444 | TOTOLINK N600R up to 4.3.0cu.7866_B20220506 HTTP Request /cgi-bin/cstecgi.cgi setWiFiBasicConfig wepkey buffer overflow

October 7, 2025 Yanac

A vulnerability was found in TOTOLINK N600R up to 4.3.0cu.7866_B20220506 and classified as critical. This impacts the function setWiFiBasicConfig of the file /cgi-bin/cstecgi.cgi of the component HTTP Request Handler. Such manipulation of the argument wepkey leads to buffer overflow.

This vulnerability is referenced as CVE-2025-11444. It is possible to launch the attack remotely. Furthermore, an exploit is available.VulDB Recent EntriesRead More