Summary
generated automatically from NVD dataTOTOLINK A950RG firmware 4.1.2cu.5268_B20221104 contains a stack-based buffer overflow in the function sub_402340 of infostat.cgi, part of the Device-Information CGI component. Manipulating the CONTENT_LENGTH argument triggers the flaw, and it can be attacked remotely. The NVD description notes that an exploit has been made public, and the issue is rated CRITICAL with a CVSS v3.1 score of 10.0 (weakness CWE-119).
NVD description
A security flaw has been discovered in TOTOLINK A950RG 4.1.2cu.5268_B20221104. Affected by this issue is the function sub_402340 of the file infostat.cgi of the component Device-Information CGI. Performing a manipulation of the argument CONTENT_LENGTH results in stack-based buffer overflow. Remote exploitation of the attack is possible. The exploit has been released to the public and may be used for attacks.
In-depth analysis on cveo.tech
This CVE is covered in an article: context, affected versions and published fixes.
CVSS v3.1 Score
Information
- Published
- 26 oct. 2026
- Updated
- 26 oct. 2026
- Status
- Received
- Source
- cna@vuldb.com
Weaknesses (CWE)
Similar CVEs
Other vulnerabilities of type CWE-119
Know which CVEs hit the versions you run.
Add the product and its version: cveo.tech lists the CVEs that affect it right away, then alerts you by email when a new one affects it — including before NVD has finished its analysis. Free, an account is all it takes.