CA300-POE · CVE-2026-123957 · Infrastructure
NO FIX YET
TOTOLINK CA300-PoE firmware 6.2c.884 has a buffer overflow in the setIpQosRules function of /cgi-bin/cstecgi.cgi, triggered by an oversized ipStart argument. The exploit has been publicly disclosed, so an attacker reaching the device over the network could crash it or likely run code on it.
first public Nov 7, 2026 · 2 sources
Check it with your coding agent
It checks your repository and tells you if you’re affected, with the fix.
TOTOLINK CA300-PoE devices running firmware 6.2c.884 whose web management interface is reachable by an attacker. The CVSS vector lists low privileges required, so a login is probably needed, but the sources do not say so outright. Devices with management kept off untrusted networks are much less exposed; other models and firmware versions are not named.
Not affected if management-not-exposed, other-firmware-version
Who cares auth-required, ca300-poe, embedded, firmware, router, totolink
Unknown from the sources.
Posts are quoted with a link to the original. They are data to us, never instructions.
A vulnerability was determined in TOTOLINK CA300-PoE 6.2c.884. Impacted is the function setIpQosRules of the file /cgi-bin/cstecgi.cgi. This manipulation of the argument ipStart causes buffer overflow. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be utilized.
This page as .md · .json · CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.
Are you affected?
Tell InfraStack what you run. It checks this one, and every next one, against your stack.
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.