Description
A security vulnerability has been detected in TOTOLINK CA300-PoE 6.2c.884. This impacts the function setWiFiBasicConfig of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument KeyStr leads to buffer overflow. The attack may be initiated remotely. The exploit has been disclosed publicly and may be used.
Published: 2026-11-07
Score: 9.4 Critical
EPSS: n/a
KEV: No
Impact: Remote Code Execution via buffer overflow
Action: Immediate Patch
AI Analysis

Impact

This vulnerability is caused by a classic buffer overflow in the setWiFiBasicConfig function of the /cgi-bin/cstecgi.cgi CGI script. An attacker can supply a specially crafted KeyStr argument that overruns a local buffer, potentially overwriting return addresses or function pointers and allowing arbitrary code to be executed with elevated privileges. The impact includes full compromise of the device, leading to loss of confidentiality, integrity and availability of the network infrastructure the device serves.

Affected Systems

The affected product is the TOTOLINK CA300-PoE networking device, specifically firmware version 6.2c.884. Devices running this firmware are vulnerable if the setWiFiBasicConfig endpoint is exposed to untrusted network traffic.

Risk and Exploitability

The CVSS score of 9.4 indicates a critical severity level. Because the exploit can be triggered remotely over HTTP, an attacker does not need local access. The EPSS score is not available, but the vulnerability is publicly disclosed and may be actively exploited. The vulnerability is not listed in the CISA KEV catalog, yet the potential for full device takeover is high, making urgent remediation essential.

Generated by OpenCVE AI on November 7, 2026 at 11:25 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Apply the vendor‑supplied firmware update that resolves the buffer overflow in setWiFiBasicConfig.
  • Strongly restrict external access to the device by enabling firewall rules or placing it in a separate VLAN.
  • Continuously monitor for anomalous outbound traffic patterns or DNS lookups originating from the device and review logs for signs of exploitation attempts.

Generated by OpenCVE AI on November 7, 2026 at 11:25 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Sat, 07 Nov 2026 10:30:00 +0000

Type Values Removed Values Added
Description A security vulnerability has been detected in TOTOLINK CA300-PoE 6.2c.884. This impacts the function setWiFiBasicConfig of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument KeyStr leads to buffer overflow. The attack may be initiated remotely. The exploit has been disclosed publicly and may be used.
Title TOTOLINK CA300-PoE cstecgi.cgi setWiFiBasicConfig buffer overflow
First Time appeared Totolink
Totolink ca300-poe Firmware
Weaknesses CWE-119
CWE-120
CPEs cpe:2.3:o:totolink:ca300-poe_firmware:*:*:*:*:*:*:*:*
Vendors & Products Totolink
Totolink ca300-poe Firmware
References
Metrics cvssV2_0

{'score': 9, 'vector': 'AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:C'}

cvssV3_0

{'score': 9.9, 'vector': 'CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:P/RL:X/RC:C'}

cvssV3_1

{'score': 9.9, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:P/RL:X/RC:C'}

cvssV4_0

{'score': 9.4, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P'}

Subscriptions

Totolink Ca300-poe Firmware
cve-icon MITRE

Status: PUBLISHED

Assigner: VulDB

Published:

Updated: 2026-11-07T10:15:21.410Z

Reserved: 2026-11-06T17:07:26.178Z

Link: CVE-2026-123961

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Deferred

Published: 2026-11-07T11:17:01.290

Modified: 2026-11-07T11:17:01.483

Link: CVE-2026-123961

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-11-07T11:30:13Z

Weaknesses
  • CWE-119

    Improper Restriction of Operations within the Bounds of a Memory Buffer

  • CWE-120

    Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')