GCVE - cpe:2.3:a:totolink:ex1800t:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:totolink:ex1800t:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Totolink (`fa0129e6-aa24-5784-be77-22d8becdb79b`)
Product	Ex1800T (`65afa449-30af-5549-8f96-9cf669084a53`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2025-2370`	vulnerable	2026-06-08 07:16:56.894088	TOTOLINK EX1800T cstecgi.cgi setWiFiExtenderConfig stack-based overflow HIGH (8.8) A vulnerability was found in TOTOLINK EX1800T up to 9.1.0cu.2112_B20220316. It has been declared as critical. Affected by this vulnerability is the function setWiFiExtenderConfig of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument apcliSsid leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Published: 2025-03-17T09:00:09.912Z Updated: 2025-03-17T16:08:06.591Z Open on db.gcve.eu Reference links https://vuldb.com/?id.299869 https://vuldb.com/?ctiid.299869 https://vuldb.com/?submit.515329 https://github.com/kn0sky/cve/blob/main/TOTOLINK%20EX1800T/Stack-based%20Buffer%20Overflow%2003%20setWiFiExtenderConfig-_apcliSsid.md https://www.totolink.net/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-2369`	vulnerable	2026-06-08 07:16:56.891177	TOTOLINK EX1800T cstecgi.cgi setPasswordCfg stack-based overflow HIGH (8.8) A vulnerability was found in TOTOLINK EX1800T up to 9.1.0cu.2112_B20220316. It has been classified as critical. Affected is the function setPasswordCfg of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument admpass leads to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Published: 2025-03-17T08:31:07.147Z Updated: 2025-03-17T16:22:33.739Z Open on db.gcve.eu Reference links https://vuldb.com/?id.299868 https://vuldb.com/?ctiid.299868 https://vuldb.com/?submit.515328 https://github.com/kn0sky/cve/blob/main/TOTOLINK%20EX1800T/Stack-based%20Buffer%20Overflow%2002%20setPasswordCfg-_admpass.md https://www.totolink.net/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-2097`	vulnerable	2026-06-08 07:14:58.012165	TOTOLINK EX1800T cstecgi.cgi setRptWizardCfg stack-based overflow HIGH (8.8) A vulnerability, which was classified as critical, has been found in TOTOLINK EX1800T 9.1.0cu.2112_B20220316. This issue affects the function setRptWizardCfg of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument loginpass leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Published: 2025-03-07T22:31:06.074Z Updated: 2025-03-10T17:20:32.188Z Open on db.gcve.eu Reference links https://vuldb.com/?id.298955 https://vuldb.com/?ctiid.298955 https://vuldb.com/?submit.515326 https://github.com/kn0sky/cve/blob/main/TOTOLINK%20EX1800T/Stack-based%20Buffer%20Overflow%2001%20setRptWizardCfg-_loginpass.md https://www.totolink.net/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-2096`	vulnerable	2026-06-08 07:14:58.011750	TOTOLINK EX1800T cstecgi.cgi setRebootScheCfg os command injection MEDIUM (6.3) A vulnerability classified as critical was found in TOTOLINK EX1800T 9.1.0cu.2112_B20220316. This vulnerability affects the function setRebootScheCfg of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument mode/week/minute/recHour leads to os command injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Published: 2025-03-07T22:00:16.475Z Updated: 2025-03-07T22:28:45.665Z Open on db.gcve.eu Reference links https://vuldb.com/?id.298954 https://vuldb.com/?ctiid.298954 https://vuldb.com/?submit.515322 https://github.com/kn0sky/cve/blob/main/TOTOLINK%20EX1800T/OS%20Command%20Injection%2004%20setRebootScheCfg-_mode.md https://www.totolink.net/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-2095`	vulnerable	2026-06-08 07:14:58.011177	TOTOLINK EX1800T cstecgi.cgi setDmzCfg os command injection MEDIUM (6.3) A vulnerability classified as critical has been found in TOTOLINK EX1800T 9.1.0cu.2112_B20220316. This affects the function setDmzCfg of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument ip leads to os command injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Published: 2025-03-07T22:00:12.940Z Updated: 2025-03-07T22:28:13.640Z Open on db.gcve.eu Reference links https://vuldb.com/?id.298953 https://vuldb.com/?ctiid.298953 https://vuldb.com/?submit.515321 https://github.com/kn0sky/cve/blob/main/TOTOLINK%20EX1800T/OS%20Command%20Injection%2003%20setDmzCfg-_ip.md https://www.totolink.net/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-2094`	vulnerable	2026-06-08 07:14:58.008869	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-1852`	vulnerable	2026-06-08 07:08:38.344566	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-12352`	vulnerable	2026-06-08 06:23:51.764009	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.