Vulnerabilities

A security flaw has been discovered in TOTOLINK CA300-PoE 6.2c.884.

A security flaw has been discovered in TOTOLINK CA300-PoE 6.2c.884. This impacts the function setWiFiMultipleConfig of the file /cgi-bin/cstecgi.cgi. Performing a manipulation of the argument Key1Str1 results in buffer overflow. The attack can be initiated remotely. The exploit has been released to the public and may be used for attacks.

Read at NIST National Vulnerability Database (CVE API 2.0)

Vendor

TOTOLINK

Product

CA300-PoE

CVSS v3.1

9.1 AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Exploitation

public exploit code reported

Weakness

CWE-119, CWE-120

NVD status

Deferred

• NIST National Vulnerability Database (CVE API 2.0) (nvd.nist.gov)
• CVE-2026-124057 on this site · NVD · CVE.org · Vulnpedia

Other items that share a CVE or were clustered with this one.

1. 33
   CVE NVD 1h ago

   A security vulnerability has been detected in TOTOLINK CA300-PoE 6.2c.884.

   CVSS 9.1 CVE-2026-124059 TOTOLINK
2. 33
   CVE NVD 1h ago

   A weakness has been identified in TOTOLINK CA300-PoE 6.2c.884.

   CVSS 9.1 CVE-2026-124058 TOTOLINK