{"id":"CVE-2025-5902","state":"PUBLISHED","title":"TOTOLINK T10 POST Request cstecgi.cgi setUpgradeFW buffer overflow","description":"A vulnerability was found in TOTOLINK T10 4.1.8cu.5207 and classified as critical. This issue affects the function setUpgradeFW of the file /cgi-bin/cstecgi.cgi of the component POST Request Handler. The manipulation of the argument slaveIpList leads to buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.","publishedAt":"2025-06-09T23:00:16.214Z","updatedAt":"2025-06-10T15:28:10.185Z","severity":{"score":8.7,"label":"High","version":"4.0","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P","source":"VulDB"},"assigner":"VulDB","products":["TOTOLINK T10"],"affected":[{"vendor":"TOTOLINK","product":"T10","versions":[{"version":"4.1.8cu.5207","status":"affected"}],"modules":["POST Request Handler"]}],"references":["https://vuldb.com/?id.311675","https://vuldb.com/?ctiid.311675","https://vuldb.com/?submit.592246","https://candle-throne-f75.notion.site/TOTOLINK-T10-setUpgradeFW-20bdf0aa11858089bc28f634bb140d00","https://www.totolink.net/"],"weaknesses":["CWE-120","CWE-119"],"ingestedAt":"2026-10-29T20:09:39.787Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2025/5xxx/CVE-2025-5902.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2025-5902","state":"PUBLISHED","datePublished":"2025-06-09T23:00:16.214Z","dateUpdated":"2025-06-10T15:28:10.185Z","assignerShortName":"VulDB","assignerOrgId":"1af790b2-7ee1-4545-860a-a788eba489b5","dateReserved":"2025-06-09T07:58:44.358Z"},"containers":{"cna":{"title":"TOTOLINK T10 POST Request cstecgi.cgi setUpgradeFW buffer overflow","descriptions":[{"lang":"en","value":"A vulnerability was found in TOTOLINK T10 4.1.8cu.5207 and classified as critical. This issue affects the function setUpgradeFW of the file /cgi-bin/cstecgi.cgi of the component POST Request Handler. The manipulation of the argument slaveIpList leads to buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used."},{"lang":"de","value":"Eine kritische Schwachstelle wurde in TOTOLINK T10 4.1.8cu.5207 gefunden. Davon betroffen ist die Funktion setUpgradeFW der Datei /cgi-bin/cstecgi.cgi der Komponente POST Request Handler. Dank Manipulation des Arguments slaveIpList mit unbekannten Daten kann eine buffer overflow-Schwachstelle ausgenutzt werden. Der Angriff kann über das Netzwerk erfolgen. Der Exploit steht zur öffentlichen Verfügung."}],"affected":[{"vendor":"TOTOLINK","product":"T10","versions":[{"version":"4.1.8cu.5207","status":"affected"}],"modules":["POST Request Handler"]}],"references":[{"url":"https://vuldb.com/?id.311675","name":"VDB-311675 | TOTOLINK T10 POST Request cstecgi.cgi setUpgradeFW buffer overflow","tags":["vdb-entry","technical-description"]},{"url":"https://vuldb.com/?ctiid.311675","name":"VDB-311675 | CTI Indicators (IOB, IOC, IOA)","tags":["signature","permissions-required"]},{"url":"https://vuldb.com/?submit.592246","name":"Submit #592246 | TOTOLINK T10 V2_Firmware V2_V4.1.8cu.5207 Buffer Overflow","tags":["third-party-advisory"]},{"url":"https://candle-throne-f75.notion.site/TOTOLINK-T10-setUpgradeFW-20bdf0aa11858089bc28f634bb140d00","tags":["exploit","patch"]},{"url":"https://www.totolink.net/","tags":["product"]}],"metrics":[{"cvssV4_0":{"version":"4.0","baseScore":8.7,"vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P","baseSeverity":"HIGH"}},{"cvssV3_1":{"version":"3.1","baseScore":8.8,"vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:X/RC:R","baseSeverity":"HIGH"}},{"cvssV3_0":{"version":"3.0","baseScore":8.8,"vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:X/RC:R","baseSeverity":"HIGH"}},{"cvssV2_0":{"version":"2.0","baseScore":9,"vectorString":"AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-120","type":"CWE","lang":"en","description":"Buffer Overflow"}]},{"descriptions":[{"cweId":"CWE-119","type":"CWE","lang":"en","description":"Memory Corruption"}]}],"providerMetadata":{"shortName":"VulDB","orgId":"1af790b2-7ee1-4545-860a-a788eba489b5","dateUpdated":"2025-06-09T23:00:16.214Z"},"timeline":[{"time":"2025-06-09T00:00:00.000Z","lang":"en","value":"Advisory disclosed"},{"time":"2025-06-09T02:00:00.000Z","lang":"en","value":"VulDB entry created"},{"time":"2025-06-09T10:03:59.000Z","lang":"en","value":"VulDB entry last update"}],"credits":[{"lang":"en","value":"Yangshuangning (VulDB User)","type":"reporter"}]},"adp":[{"title":"CISA ADP Vulnrichment","references":[{"url":"https://candle-throne-f75.notion.site/TOTOLINK-T10-setUpgradeFW-20bdf0aa11858089bc28f634bb140d00","tags":["exploit"]}],"metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2025-06-10T14:20:09.789201Z","id":"CVE-2025-5902","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2025-06-10T15:28:10.185Z"}}]}}}