CVE-2025-4496

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

A vulnerability was found in TOTOLINK T10, A3100R, A950RG, A800R, N600R, A3000RU and A810R 4.1.8cu.5241_B20210927. It has been declared as critical. This vulnerability affects the function CloudACMunualUpdate of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument FileName leads to buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-119 CWE-120

Affected software

Vendor	Product	Versions
TOTOLINK	T10	4.1.8cu.5241_B20210927
TOTOLINK	A3100R	4.1.8cu.5241_B20210927
TOTOLINK	A950RG	4.1.8cu.5241_B20210927
TOTOLINK	A800R	4.1.8cu.5241_B20210927
TOTOLINK	N600R	4.1.8cu.5241_B20210927
TOTOLINK	A3000RU	4.1.8cu.5241_B20210927
TOTOLINK	A810R	4.1.8cu.5241_B20210927

References

https://github.com/CH13hh/tmp_store_cc/blob/main/tt/ta/1.mdBroken Link
https://vuldb.com/?ctiid.308212Permissions Required, VDB Entry
https://vuldb.com/?id.308212Third Party Advisory, VDB Entry
https://vuldb.com/?submit.567081Third Party Advisory, VDB Entry
https://www.totolink.net/Product
https://github.com/CH13hh/tmp_store_cc/blob/main/tt/ta/1.mdBroken Link

Timeline

Published: May 10, 2025
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2025

CVE-2025-449608.8RUCKUS SmartZone (SZ) before 6.1.2p3 Refresh Build allows OS command injection via a certain parameter in an API route.CVE-2025-449618.8In RUCKUS SmartZone (SZ) before 6.1.2p3 Refresh Build, OS command injection can occur via an IP address field provided by an authenticated u CVE-2025-449624.3RUCKUS SmartZone (SZ) before 6.1.2p3 Refresh Build allows ../ directory traversal to read files.CVE-2025-449638.1RUCKUS Network Director (RND) before 4.5 allows spoofing of an administrator JWT by an attacker who knows the hardcoded value of a certain s CVE-2025-449643.9A lack of SSL certificate validation in BlueStacks v5.20 allows attackers to execute a man-it-the-middle attack and obtain sensitive informa CVE-2025-44977.8A vulnerability was found in code-projects Simple Banking System up to 1.0. It has been rated as critical. This issue affects some unknown p CVE-2025-44987.8A vulnerability classified as critical has been found in code-projects Simple Bus Reservation System 1.0. Affected is the function a::instal CVE-2025-44997.8A vulnerability classified as critical was found in code-projects Simple Hospital Management System 1.0. Affected by this vulnerability is t CVE-2025-449986.1A stored cross-site scripting (XSS) vulnerability in the component /tinyfilemanager.php of TinyFileManager v2.4.7 allows attackers to execut CVE-2025-45007.8A vulnerability, which was classified as critical, has been found in code-projects Hotel Management System 1.0. Affected by this issue is th CVE-2025-450017.5react-native-keys 0.7.11 is vulnerable to sensitive information disclosure (remote) as encryption cipher and Base64 chunks are stored as pla CVE-2025-450025.4Vigybag v1.0 and before is vulnerable to Cross Site Scripting (XSS) via the upload profile picture function under my profile.