CyberRota Analysis
AI-GeneratedTOTOLINK A800R version 4.1.2cu.5137_B20200730 is vulnerable due to a stack-based buffer overflow in the UploadCustomModule function of the /cgi-bin/cstecgi.cgi file, which can be exploited remotely. This vulnerability has a high severity rating and could allow attackers to execute arbitrary code, potentially compromising the device. Organizations using this router should prioritize patching or mitigating this vulnerability to prevent exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A weakness has been identified in TOTOLINK A800R 4.1.2cu.5137_B20200730. This affects the function UploadCustomModule of the file /cgi-bin/cstecgi.cgi of the component product.so. This manipulation of the argument File causes stack-based buffer overflow. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be used for attacks.