CVE-2025-12258High· 8.8▾ TwilightA vulnerability was detected in TOTOLINK A3300R 17.0.0cu.557_B20221024. Impacted is the function setOpModeCfg of the file /cgi-bin/cstecgi.cg of the component POST Parameter Handler. The manipulation of the argument opmode results in sta…
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 48.4 · likelihood 0.2 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Oct 8.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
1.0%
A vulnerability was detected in TOTOLINK A3300R 17.0.0cu.557_B20221024. Impacted is the function setOpModeCfg of the file /cgi-bin/cstecgi.cg of the component POST Parameter Handler. The manipulation of the argument opmode results in stack-based buffer overflow. The attack may be performed from remote.
a3300r_firmware = 17.0.0cu.557_b20221024Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2025-12260High· 8.8A vulnerability has been found in TOTOLINK A3300R 17.0.0cu.557_B20221024
CVE-2025-12259High· 8.8A flaw has been found in TOTOLINK A3300R 17.0.0cu.557_B20221024
CVE-2025-12241High· 8.8A vulnerability was detected in TOTOLINK A3300R 17.0.0cu.557_B20221024
CVE-2026-116508Critical· 10.0TOTOLINK A950RG Device-Information CGI infostat.cgi sub_402340 stack-based overflow
CVE-2026-114382Critical· 10.0TOTOLINK EX200 lan.so cstecgi.cgi setStaticDhcpConfig stack-based overflow
CVE-2026-114383Critical· 10.0TOTOLINK EX200 wireless.so cstecgi.cgi setWiFiAclAddConfig stack-based overflow