Description
A weakness has been identified in TOTOLINK EX200 5.2.3c.7200. This impacts the function setWiFiAclAddConfig of the file /cgi-bin/cstecgi.cgi of the component wireless.so. This manipulation of the argument macAddress causes stack-based buffer overflow. The attack can be initiated remotely. The exploit has been made available to the public and could be used for attacks.
Published: 2026-10-21
Score: 10 Critical
EPSS: < 1% Very Low
KEV: No
Impact: Remote Code Execution
Action: Immediate Patch
AI Analysis

Impact

The flaw is a stack-based buffer overflow in the setWiFiAclAddConfig function of the wireless.so component, triggered by an attacker‑crafted macAddress value. The overflow can corrupt the stack and allow arbitrary code execution on the device, giving attackers full control of the EX200 router. This weakness corresponds to CWE-119 and CWE-121.

Affected Systems

The vulnerability affects TOTOLINK EX200 routers running firmware version 5.2.3c.7200. The flaw resides in the /cgi-bin/cstecgi.cgi CGI script and the wireless.so component of that firmware.

Risk and Exploitability

The CVSS score of 10 places this flaw in the highest severity bracket, and the existence of a publicly available exploit confirms that attackers can abuse it from a remote location without prior authentication. Although the EPSS score is not reported, the remote nature of the attack and the known exploit suggest a high risk of real-world exploitation. The vulnerability is not yet listed in CISA KEV, but its criticality warrants immediate attention.

Generated by OpenCVE AI on October 22, 2026 at 03:25 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Upgrade the EX200 firmware to the latest version that includes the stack overflow fix.
  • Limit external access to the device’s web interface and CGI endpoints, for example by disabling cstecgi.cgi or restricting allowed IP ranges.
  • Monitor inbound traffic and device logs for abnormal requests to /cgi-bin/cstecgi.cgi, and investigate any suspicious activity promptly.

Generated by OpenCVE AI on October 22, 2026 at 03:25 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Thu, 29 Oct 2026 09:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'poc', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Thu, 22 Oct 2026 04:30:00 +0000

Type Values Removed Values Added
First Time appeared Totolink ex200
Vendors & Products Totolink ex200

Wed, 21 Oct 2026 22:00:00 +0000

Type Values Removed Values Added
Description A weakness has been identified in TOTOLINK EX200 5.2.3c.7200. This impacts the function setWiFiAclAddConfig of the file /cgi-bin/cstecgi.cgi of the component wireless.so. This manipulation of the argument macAddress causes stack-based buffer overflow. The attack can be initiated remotely. The exploit has been made available to the public and could be used for attacks.
Title TOTOLINK EX200 wireless.so cstecgi.cgi setWiFiAclAddConfig stack-based overflow
First Time appeared Totolink
Totolink ex200 Firmware
Weaknesses CWE-119
CWE-121
CPEs cpe:2.3:o:totolink:ex200_firmware:*:*:*:*:*:*:*:*
Vendors & Products Totolink
Totolink ex200 Firmware
References
Metrics cvssV2_0

{'score': 10, 'vector': 'AV:N/AC:L/Au:N/C:C/I:C/A:C/E:POC/RL:ND/RC:UR'}

cvssV3_0

{'score': 10, 'vector': 'CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:P/RL:X/RC:R'}

cvssV3_1

{'score': 10, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:P/RL:X/RC:R'}

cvssV4_0

{'score': 10, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P'}

Subscriptions

Totolink Ex200 Ex200 Firmware
cve-icon MITRE

Status: PUBLISHED

Assigner: VulDB

Published:

Updated: 2026-10-28T18:28:02.178Z

Reserved: 2026-10-21T11:26:32.468Z

Link: CVE-2026-114383

cve-icon Vulnrichment

Updated: 2026-10-28T18:27:57.564Z

cve-icon NVD

Status : Deferred

Published: 2026-10-21T22:16:49.077

Modified: 2026-10-28T19:17:27.763

Link: CVE-2026-114383

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-10-22T04:15:09Z

Weaknesses
  • CWE-119

    Improper Restriction of Operations within the Bounds of a Memory Buffer

  • CWE-121

    Stack-based Buffer Overflow