Description
A vulnerability was found in TOTOLINK CP450 4.1.0. The impacted element is an unknown function of the file /cgi-bin/cstecgi.cgi. Performing a manipulation of the argument topicurl results in buffer overflow. Remote exploitation of the attack is possible.
Published: 2026-09-03
Score: 9.4 Critical
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

An overrun occurs when an attacker sends a crafted value to the topicurl argument of /cgi-bin/cstecgi.cgi, causing a buffer overflow that can be leveraged for arbitrary code execution on the router. The weakness is categorized as CWE‑119 and CWE‑120, reflecting improper bounds checking and unsafe memory handling. The vulnerability is openly reachable over the network, allowing an attacker to trigger the overflow without local access.

Affected Systems

Only the TOTOLINK CP450 router with firmware version 4.1.0 is documented as affected. No other vendor models or firmware releases are mentioned, so the risk is confined to that specific combination.

Risk and Exploitability

The issue carries a CVSS score of 9.4, indicating critical severity, and its EPSS score is currently unknown. It is not listed in CISA's KEV catalogue. Because the exploit is remote and requires only an HTTP request to the exposed CGI handler, the attack surface is high. An attacker would send a malicious request to /cgi-bin/cstecgi.cgi from an external network to trigger the overflow and potentially take control of the router.

Generated by OpenCVE AI on September 3, 2026 at 10:21 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Determine whether any router is running firmware 4.1.0; list all affected devices for prioritization.
  • Configure the router’s firewall or a network ACL to block or restrict access to /cgi-bin/cstecgi.cgi from untrusted networks, limiting exposure to local or trusted sources.
  • Monitor web traffic and device logs for requests targeting cstecgi.cgi with unusually long or suspicious topicurl parameters, and investigate any anomalies.
  • Keep updated with vendor advisories and apply any firmware update that addresses the buffer overflow when it becomes available.

Generated by OpenCVE AI on September 3, 2026 at 10:21 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Thu, 03 Sep 2026 13:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Thu, 03 Sep 2026 10:00:00 +0000

Type Values Removed Values Added
First Time appeared Totolink cp450
Vendors & Products Totolink cp450

Thu, 03 Sep 2026 02:15:00 +0000

Type Values Removed Values Added
Description A vulnerability was found in TOTOLINK CP450 4.1.0. The impacted element is an unknown function of the file /cgi-bin/cstecgi.cgi. Performing a manipulation of the argument topicurl results in buffer overflow. Remote exploitation of the attack is possible.
Title TOTOLINK CP450 cstecgi.cgi buffer overflow
First Time appeared Totolink
Totolink cp450 Firmware
Weaknesses CWE-119
CWE-120
CPEs cpe:2.3:o:totolink:cp450_firmware:*:*:*:*:*:*:*:*
Vendors & Products Totolink
Totolink cp450 Firmware
References
Metrics cvssV2_0

{'score': 9, 'vector': 'AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR'}

cvssV3_0

{'score': 9.9, 'vector': 'CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:P/RL:X/RC:R'}

cvssV3_1

{'score': 9.9, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:P/RL:X/RC:R'}

cvssV4_0

{'score': 9.4, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P'}

Subscriptions

Totolink Cp450 Cp450 Firmware
cve-icon MITRE

Status: PUBLISHED

Assigner: VulDB

Published:

Updated: 2026-09-03T12:50:35.023Z

Reserved: 2026-09-02T20:14:56.396Z

Link: CVE-2026-85031

cve-icon Vulnrichment

Updated: 2026-09-03T12:50:30.966Z

cve-icon NVD

Status : Deferred

Published: 2026-09-03T13:06:19.767

Modified: 2026-09-03T17:25:25.113

Link: CVE-2026-85031

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-09-03T10:30:12Z

Weaknesses
  • CWE-119

    Improper Restriction of Operations within the Bounds of a Memory Buffer

  • CWE-120

    Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')