CVE-2025-4496 | TOTOLINK T10/A3100R/A950RG/A800R/N600R/A3000RU/A810R 4.1.8cu.5241_B20210927 /cgi-bin/cstecgi.cgi CloudACMunualUpdate FileName buffer overflow

A vulnerability was found in TOTOLINK T10, A3100R, A950RG, A800R, N600R, A3000RU and A810R 4.1.8cu.5241_B20210927. It has been declared as critical. This vulnerability affects the function CloudACMunualUpdate of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument FileName leads to buffer overflow.

This vulnerability was named CVE-2025-4496. The attack can be initiated remotely. Furthermore, there is an exploit available.