CVE-2025-14964 | TOTOLINK T10 4.1.8cu.5083_B20200521 /cgi-bin/cstecgi.cgi sprintf loginAuthUrl stack-based overflow

A vulnerability, which was classified as critical, was found in TOTOLINK T10 4.1.8cu.5083_B20200521. This affects the function sprintf of the file /cgi-bin/cstecgi.cgi. Such manipulation of the argument loginAuthUrl leads to stack-based buffer overflow.

This vulnerability is listed as CVE-2025-14964. The attack may be performed from remote. There is no available exploit.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.