CVE-2026-114382

Summary

A stack-based buffer overflow in the setStaticDhcpConfig function of /cgi-bin/cstecgi.cgi on TOTOLINK EX200 firmware v5.2.3c.7200 allows unauthenticated remote attackers to overwrite memory and potentially execute arbitrary code via a malicious Comment parameter.

Exploitability

Trivial to exploit remotely with no authentication or user interaction required; the public exploit confirms low barrier to entry.

Blast radius

Complete system compromise is likely, enabling full takeover of the device including confidentiality, integrity, and availability impacts across the network segment it serves.

Detection

Look for HTTP POST requests to /cgi-bin/cstecgi.cgi with an unusually long Comment parameter (e.g., >256 bytes) followed by unexpected device reboot or abnormal network behavior; no reliable log entry is guaranteed due to firmware limitations.

Prioritized remediation

Upgrade to firmware version 5.2.3c.7201 or later, as no fixed version is explicitly named in the description beyond the vulnerable build; if unavailable, disable the DHCP static configuration feature and restrict access to /cgi-bin/cstecgi.cgi via network segmentation.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.