CVE-2025-1852: Totolink EX1800T cstecgi.cgi loginAuth buffer overflow

Severity: critical (CVSS 9.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.9% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2025-03-03 · updated 2026-06-17
Weakness: CWE-119

Description

A vulnerability has been found in Totolink EX1800T 9.1.0cu.2112_B20220316 and classified as critical. This vulnerability affects the function loginAuth of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument password leads to buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

Affected products

TOTOLINK EX1800T: 9.1.0cu.2112_b20220316

References

https://github.com/watermelon-happy/cve/blob/main/ex1800tCVE.md
https://vuldb.com/?ctiid.298120
https://vuldb.com/?id.298120
https://vuldb.com/?submit.505362
https://www.totolink.net/
https://github.com/watermelon-happy/cve/blob/main/ex1800tCVE.md

Get alerted when CVE-2025-1852 or the next vulnerability affects your stack