CVE detail
CVE-2025-11444
A security vulnerability has been detected in TOTOLINK N600R up to 4.3.0cu.7866_B20220506. This impacts the function setWiFiBasicConfig of the file /cgi-bin/cstecgi.cgi of the component HTTP Request Handler. Such manipulation of the argument wepkey leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed publicly and may be used.
Buzz score
Why this CVE is surfacing
This all-time snapshot uses the same composite formula as Trending across a 30-year evidence window, rather than a current rolling window.
Buzz score components · mention 19.5 · diversity 11.5 · KEV 0.0 · OTX 0.0 · PoC 4.5
Why it matters now
Mention timeline
- Total mentions
- 0
- within the 30d window
- Peak daily
- 0
- highest bucket
Evidence
Source links by recency
6 source links · newest first
- https://www.totolink.net/www.totolink.net
No excerpt available.
Productwww.totolink.netOct 8, 2025, 8:15 AM - https://vuldb.com/?submit.666915vuldb.com
No excerpt available.
Exploitvuldb.comOct 8, 2025, 8:15 AM - https://vuldb.com/?id.327381vuldb.com
No excerpt available.
Exploitvuldb.comOct 8, 2025, 8:15 AM - https://vuldb.com/?ctiid.327381vuldb.com
No excerpt available.
Exploitvuldb.comOct 8, 2025, 8:15 AM - https://github.com/z472421519/BinaryAudit/blob/main/PoC/BOF/TOTOLINK/wepkey/wepkey.md#reproducegithub.com
No excerpt available.
Exploitgithub.comOct 8, 2025, 8:15 AM No excerpt available.
Exploitgithub.comOct 8, 2025, 8:15 AM
Exploit code
Public exploit repository references
Public PoC repositories are third-party, potentially unsafe artifacts. Treat their code as untrusted and use it only on authorized systems in an isolated, least-privilege environment. cvebuzz does not execute the code or verify that an exploit works.
1 repository references · best confidence 0.90 · max 0 stars
- z472421519/BinaryAuditHigh confidencegithubNVD Exploit reference0 starsDiscovered Jul 23, 2026, 12:21 PM
NVD labels the source link as Exploit; this is not independent verification of the repository's code.
Related records
Similar CVEs
6 related CVEs with shared weakness or product evidence
- CVE-2025-4496CVSS 8.7 · High
A vulnerability was found in TOTOLINK T10, A3100R, A950RG, A800R, N600R, A3000RU and A810R 4.1.8cu.5241_B20210927. It has been declared as critical. This vulnerability affects the…
- CVE-2025-46060CVSS 9.8 · Critical
Buffer Overflow vulnerability in TOTOLINK N600R v4.3.0cu.7866_B2022506 allows a remote attacker to execute arbitrary code via the UPLOAD_FILENAME component
- CVE-2026-19821CVSS 7.4 · High
A vulnerability was determined in Tenda AC12 15.03.06.23_multi_TD01. This vulnerability affects the function formSetRebootTimer of the file /goform/SetSysAutoRebbotCfg of the comp…
- CVE-2026-19792CVSS 7.4 · High
A security flaw has been discovered in Tenda G0 up to 20260625. Impacted is the function setPortMapping of the file /goform/module of the component httpd web management interface.…
- CVE-2024-14044CVSS 2.1 · Low
A vulnerability was identified in Open5GS up to 2.7.1. This issue affects the function pcrf_rx_aar_cb of the file src/pcrf/pcrf-rx-path.c of the component Diameter Rx Handler. The…
- CVE-2026-16364CVSS 9.1 · Critical
Incorrect boundary conditions in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.