CVE-2025-12258 – TOTOLINK A3300R POST Parameter cstecgi.cg setOpModeCfg stack-based overflow

CVE ID : CVE-2025-12258

Published : Oct. 27, 2025, 10:15 a.m. | 29 minutes ago

Description : A vulnerability was detected in TOTOLINK A3300R 17.0.0cu.557_B20221024. Impacted is the function setOpModeCfg of the file /cgi-bin/cstecgi.cg of the component POST Parameter Handler. The manipulation of the argument opmode results in stack-based buffer overflow. The attack may be performed from remote.

Severity: 9.0 | HIGH

Visit the link for more details, such as CVSS details, affected products, timeline, and more…