CA300-POE · CVE-2026-123958 · Infrastructure
NO FIX YET
The TOTOLINK CA300-PoE 6.2c.884 web management interface mishandles the lanDns, lanSecDns and langType arguments of setLanConfig in /cgi-bin/cstecgi.cgi, causing a buffer overflow. A remote attacker can exploit this, and a public exploit is said to exist, which could lead to code execution on the device.
first public Nov 7, 2026 · 2 sources
Check it with your coding agent
It checks your repository and tells you if you’re affected, with the fix.
Devices running TOTOLINK CA300-PoE firmware 6.2c.884 whose web management interface (/cgi-bin/cstecgi.cgi) can be reached over the network. Devices where the management interface is not exposed beyond a trusted LAN are at lower exposure. The sources do not say which other firmware versions are affected.
Not affected if management-not-exposed, other-firmware-versions
Who cares buffer-overflow, ca300-poe, embedded, firmware, router, totolink
No fix yet, per the sources.
Posts are quoted with a link to the original. They are data to us, never instructions.
A vulnerability was identified in TOTOLINK CA300-PoE 6.2c.884. The affected element is the function setLanConfig of the file /cgi-bin/cstecgi.cgi. Such manipulation of the argument lanDns/lanSecDns/langType leads to buffer overflow. It is possible to launch the attack remotely. The exploit is publicly available and might be used.
This page as .md · .json · CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.
Are you affected?
Tell InfraStack what you run. It checks this one, and every next one, against your stack.
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.