Description
A weakness has been identified in TOTOLINK A950RG 4.1.2cu.5268_B20221104. This affects the function setAppEasyWizardConfig of the file /cgi-bin/cstecgi.cgi of the component Easy Setup Wizard Handler. Executing a manipulation of the argument functionType can lead to stack-based buffer overflow. The attack may be performed from remote. The exploit has been made available to the public and could be used for attacks.
Published: 2026-11-04
Score: 9.4 Critical
EPSS: < 1% Very Low
KEV: No
Impact: Remote Code Execution
Action: Immediate Patch
AI Analysis

Impact

A stack-based buffer overflow exists in the setAppEasyWizardConfig function within /cgi-bin/cstecgi.cgi of the Easy Setup Wizard Handler on TOTOLINK A950RG. By manipulating the functionType argument, a remote attacker can trigger an overflow that may lead to arbitrary code execution. The vulnerability is associated with CWE-119 and CWE-121, and has a CVSS score of 9.4, indicating a severe risk to confidentiality, integrity, and availability of the device.

Affected Systems

The flaw affects TOTOLINK routers running firmware 4.1.2cu.5268_B20221104 on the A950RG model. Users of this specific firmware revision are vulnerable unless they upgrade beyond this version.

Risk and Exploitability

The CVSS base score of 9.4 reflects a critical level of risk. The EPSS score is not available, but the vulnerability is publicly disclosed and exploits have been released, indicating a realistic threat of exploitation from a remote source. The attack can be performed over the network without authentication, making containment urgent. The issue is not yet catalogued in the CISA KEV list.

Generated by OpenCVE AI on November 4, 2026 at 08:47 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Upgrade the router firmware to the latest revision that includes the fix for the setAppEasyWizardConfig overflow.
  • If a firmware update is not immediately available, restrict or block external access to the /cgi-bin/cstecgi.cgi endpoint using firewall rules or router access‑control lists.
  • Consider disabling the Easy Setup Wizard feature or the entire web configuration interface if unnecessary for your network environment.

Generated by OpenCVE AI on November 4, 2026 at 08:47 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Wed, 04 Nov 2026 02:30:00 +0000

Type Values Removed Values Added
First Time appeared Totolink a950rg
Vendors & Products Totolink a950rg

Wed, 04 Nov 2026 00:30:00 +0000

Type Values Removed Values Added
Description A weakness has been identified in TOTOLINK A950RG 4.1.2cu.5268_B20221104. This affects the function setAppEasyWizardConfig of the file /cgi-bin/cstecgi.cgi of the component Easy Setup Wizard Handler. Executing a manipulation of the argument functionType can lead to stack-based buffer overflow. The attack may be performed from remote. The exploit has been made available to the public and could be used for attacks.
Title TOTOLINK A950RG Easy Setup Wizard cstecgi.cgi setAppEasyWizardConfig stack-based overflow
First Time appeared Totolink
Totolink a950rg Firmware
Weaknesses CWE-119
CWE-121
CPEs cpe:2.3:o:totolink:a950rg_firmware:*:*:*:*:*:*:*:*
Vendors & Products Totolink
Totolink a950rg Firmware
References
Metrics cvssV2_0

{'score': 9, 'vector': 'AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR'}

cvssV3_0

{'score': 9.9, 'vector': 'CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:P/RL:X/RC:R'}

cvssV3_1

{'score': 9.9, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:P/RL:X/RC:R'}

cvssV4_0

{'score': 9.4, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P'}

Subscriptions

Totolink A950rg A950rg Firmware
cve-icon MITRE

Status: PUBLISHED

Assigner: VulDB

Published:

Updated: 2026-11-04T00:00:30.063Z

Reserved: 2026-11-03T16:14:27.923Z

Link: CVE-2026-121597

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Deferred

Published: 2026-11-04T00:17:27.410

Modified: 2026-11-04T00:17:27.583

Link: CVE-2026-121597

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-11-04T09:00:16Z

Weaknesses
  • CWE-119

    Improper Restriction of Operations within the Bounds of a Memory Buffer

  • CWE-121

    Stack-based Buffer Overflow