Skip to content
CVE PROGRAM SOURCE RECORD6.9 Medium

CVE-2025-9935

TOTOLINK N600R cstecgi.cgi sub_4159F8 command injection

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
VulDB

Description

A vulnerability was determined in TOTOLINK N600R 4.3.0cu.7866_B20220506. This vulnerability affects the function sub_4159F8 of the file /web_cste/cgi-bin/cstecgi.cgi. Executing manipulation can lead to command injection. The attack can be executed remotely. The exploit has been publicly disclosed and may be utilized.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

TOTOLINK N600R

  • 4.3.0cu.7866_B20220506affected

References