CVE-2026-124057

Summary

A buffer overflow vulnerability exists in the setWiFiMultipleConfig function of the TOTOLINK CA300-PoE device's CGI endpoint, triggered by manipulation of the Key1Str1 argument, allowing remote attackers to overwrite memory and potentially execute arbitrary code. This is a critical flaw due to high impact on confidentiality, integrity, and availability.

Exploitability

Exploitation requires high privileges (PR:H) and remote access to the vulnerable CGI endpoint, but the exploit has been publicly released, lowering practical difficulty for authenticated attackers.

Blast radius

Successful exploitation could lead to full system compromise including remote code execution, data exfiltration, and device denial-of-service, affecting network infrastructure relying on this device.

Detection

Defenders should monitor /cgi-bin/cstecgi.cgi access logs for unusually long Key1Str1 parameter values exceeding expected length limits (e.g., >256 bytes), especially when accompanied by HTTP 500 errors or unexpected device restarts. No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to firmware version 6.2c.885 or later, as the vendor has released a patched version addressing this buffer overflow in the setWiFiMultipleConfig function.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.