CA300-POE · CVE-2026-123961 · Infrastructure
NO FIX YET
The TOTOLINK CA300-PoE firmware version 6.2c.884 has a buffer overflow in the setWiFiBasicConfig function of /cgi-bin/cstecgi.cgi, triggered by the KeyStr argument. The sources say an attacker may trigger it remotely, and a public exploit has been disclosed.
first public Nov 7, 2026 · 2 sources
Check it with your coding agent
It checks your repository and tells you if you’re affected, with the fix.
TOTOLINK CA300-PoE access points running firmware 6.2c.884 are affected through the setWiFiBasicConfig handler in cstecgi.cgi (KeyStr argument). The CVE record's CVSS vector uses PR:L, which suggests a low-privilege login is needed, but no source states the authentication requirement in words. Devices whose management interface is not reachable from untrusted networks are at lower risk.
Who cares ca300-poe, firmware, totolink, wifi-access-point
Unknown from the sources.
A security vulnerability has been detected in TOTOLINK CA300-PoE 6.2c.884. This impacts the function setWiFiBasicConfig of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument KeyStr leads to buffer overflow. The attack may be initiated remotely. The exploit has been disclosed publicly and may be used.
This page as .md · .json · CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.
Are you affected?
Tell InfraStack what you run. It checks this one, and every next one, against your stack.
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.