Approved changes feed: RSS · Atom

cpe:2.3:o:totolink:a3600r_firmware:5.9c.4959:*:*:*:*:*:*:*

part: o version: 5.9c.4959 update: *

VendorTotolink (fa0129e6-aa24-5784-be77-22d8becdb79b)
ProductA3600R Firmware (b9edbc16-e957-595e-bd9b-212416f0e36a)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-31027 vulnerable 2026-06-08 07:57:14.677348 Details available
TOTOlink A3600R v5.9c.4959 contains a buffer overflow vulnerability in the setAppEasyWizardConfig interface of /lib/cste_modules/app.so. The vulnerability occurs because the rootSsid parameter is not properly validated for length, allowing remote attackers to trigger a buffer overflow, potentially leading to arbitrary code execution or denial of service.
Published: 2026-04-01T00:00:00.000Z
Updated: 2026-04-01T18:23:53.528Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-1686 vulnerable 2026-06-08 07:49:09.361934 Totolink A3600R app.so setAppEasyWizardConfig buffer overflow
HIGH (8.8)
A security flaw has been discovered in Totolink A3600R 5.9c.4959. This issue affects the function setAppEasyWizardConfig in the library /lib/cste_modules/app.so. Performing a manipulation of the argument apcliSsid results in buffer overflow. It is possible to initiate the attack remotely. The exploit has been released to the public and may be used for attacks.
Published: 2026-01-30T15:02:08.241Z
Updated: 2026-02-23T09:09:13.406Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.