CVE-2025-12241 | TOTOLINK A3300R 17.0.0cu.557_B20221024 POST Parameter /cgi-bin/cstecgi.cgi setLanguageCfg lang stack-based overflow

A vulnerability classified as critical was found in TOTOLINK A3300R 17.0.0cu.557_B20221024. This impacts the function setLanguageCfg of the file /cgi-bin/cstecgi.cgi of the component POST Parameter Handler. The manipulation of the argument lang results in stack-based buffer overflow.

This vulnerability is known as CVE-2025-12241. It is possible to launch the attack remotely. Furthermore, an exploit is available.