EX1800T vulnerabilities

9 known vulnerabilities in EX1800T from TOTOLINK. 9 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  EX1800T: Out-of-bounds Write

  CVE-2025-2370Mar 17, 2025TOTOLINKEPSS 1.17%

  A vulnerability was found in TOTOLINK EX1800T up to 9.1.0cu.2112_B20220316. It has been declared as critical. Affected by this vulnerability is the function setWiFiExtenderConfig of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument apcliSsid lead

• 9.8 Critical severity

  EX1800T: Out-of-bounds Write

  CVE-2025-2369Mar 17, 2025TOTOLINKEPSS 1.17%

  A vulnerability was found in TOTOLINK EX1800T up to 9.1.0cu.2112_B20220316. It has been classified as critical. Affected is the function setPasswordCfg of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument admpass leads to stack-based buffer overf

• 9.8 Critical severity

  EX1800T: Out-of-bounds Write

  CVE-2025-2097Mar 7, 2025TOTOLINKEPSS 7.21%

  A vulnerability, which was classified as critical, has been found in TOTOLINK EX1800T 9.1.0cu.2112_B20220316. This issue affects the function setRptWizardCfg of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument loginpass leads to stack-based buff

• 9.8 Critical severity

  EX1800T: Improper Neutralization of Special Elements used in an OS Command

  CVE-2025-2096Mar 7, 2025TOTOLINKEPSS 2.78%

  A vulnerability classified as critical was found in TOTOLINK EX1800T 9.1.0cu.2112_B20220316. This vulnerability affects the function setRebootScheCfg of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument mode/week/minute/recHour leads to os comman

• 9.8 Critical severity

  EX1800T: Improper Neutralization of Special Elements used in an OS Command

  CVE-2025-2095Mar 7, 2025TOTOLINKEPSS 2.78%

  A vulnerability classified as critical has been found in TOTOLINK EX1800T 9.1.0cu.2112_B20220316. This affects the function setDmzCfg of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument ip leads to os command injection. It is possible to initiat

• 9.8 Critical severity

  EX1800T: Improper Neutralization of Special Elements used in an OS Command

  CVE-2025-2094Mar 7, 2025TOTOLINKEPSS 13%

  A vulnerability was found in TOTOLINK EX1800T 9.1.0cu.2112_B20220316. It has been rated as critical. Affected by this issue is the function setWiFiExtenderConfig of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument apcliKey/key leads to os comman

• 9.8 Critical severity

  EX1800T: Buffer Copy without Checking Size of Input

  CVE-2025-1852Mar 3, 2025TOTOLINK

  A vulnerability has been found in Totolink EX1800T 9.1.0cu.2112_B20220316 and classified as critical. This vulnerability affects the function loginAuth of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument password leads to buffer overflow. The at

• 9.8 Critical severity

  EX1800T: Out-of-bounds Write

  CVE-2024-12352Dec 9, 2024TOTOLINK

  A vulnerability classified as problematic was found in TOTOLINK EX1800T 9.1.0cu.2112_B20220316. This vulnerability affects the function sub_40662C of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument ssid leads to stack-based buffer overflow. The

• 9.8 Critical severity

  ex1800t: Improper Neutralization of Special Elements used in an OS Command

  CVE-2023-52026Jan 12, 2024TOTOLINKEPSS 1.64%

  TOTOlink EX1800T V9.1.0cu.2112_B20220316 was discovered to contain a remote command execution (RCE) vulnerability via the telnet_enabled parameter of the setTelnetCfg interface