---
id: "CVE-2026-124057"
page: "https://infrastack.ai/live/CVE-2026-124057"
kind: "vulnerability"
aliases: ["CVE-2026-124057"]
title: "TOTOLINK CA300-PoE: remote buffer overflow in Wi-Fi config handler"
severity: "critical"
cvss: 9.1
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: [{"name": "CA300-PoE", "fixed": [], "affected": "6.2c.884", "ecosystem": "firmware"}]
ecosystems: []
tags: ["auth-required", "ca300-poe", "embedded", "firmware", "infrastructure", "router", "totolink"]
not_affected_if: ["management-interface-not-reachable", "no-network-exposure", "other-firmware-version"]
published_at: "2026-11-07T18:17:21+00:00"
first_seen_at: "2026-11-07T18:48:29+00:00"
updated_at: "2026-11-07T18:50:44+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-124057", "first_seen_at": "2026-11-07T18:48:29+00:00"}, {"source": "analyst", "url": "https://vuldb.com/vuln/432112", "first_seen_at": "2026-11-07T18:50:44+00:00", "cites": ["https://vuldb.com/vuln/432112", "https://nvd.nist.gov/vuln/detail/CVE-2026-124057"]}]
exploit_sources: []
---

# TOTOLINK CA300-PoE: remote buffer overflow in Wi-Fi config handler

Link for people: https://infrastack.ai/live/CVE-2026-124057 (this .md is for agents)

TOTOLINK CA300-PoE firmware 6.2c.884 has a buffer overflow in the setWiFiMultipleConfig function of its web CGI endpoint, triggered by the Key1Str1 argument. A remote attacker can send a crafted request to overflow memory, and a public exploit has been released.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- firmware:CA300-PoE affected 6.2c.884 fixed no fixed version listed

## How to check

- Check the firmware version on the device admin page; 6.2c.884 is the only version reported affected (other versions unconfirmed, not necessarily safe).
- Check whether the web management interface (/cgi-bin/cstecgi.cgi) is reachable from the internet or untrusted networks.
- VulDB says exploitation needs an authenticated session; also check for weak or default admin passwords.
- Look for requests to /cgi-bin/cstecgi.cgi with setWiFiMultipleConfig and an oversized Key1Str1 in logs, if the device forwards them.

## Timeline

- 2026-11-07T18:48:29+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-124057
- 2026-11-07T18:50:44+00:00 analyst https://vuldb.com/vuln/432112 — No TOTOLINK advisory found; read VulDB VDB-432112 (CNA). Affects CA300-PoE 6.2c.884; PoC claimed on a Notion page (link not readable); VulDB says exploitation needs additional authentication (CVSS4 PR:H) and no countermeasures known; no fix stated by vendor. Nothing marked verified (no primary vendor source). No exploitation in the wild reported. Siblings CVE-2026-123957..61 hit the same device/endpoint.

## Documents

- [describes] VDB-432112: TOTOLINK CA300-PoE setWiFiMultipleConfig Key1Str1 buffer overflow https://vuldb.com/vuln/432112
- [mentions] NVD CVE-2026-124057 https://nvd.nist.gov/vuln/detail/CVE-2026-124057

## From the sources

A security flaw has been discovered in TOTOLINK CA300-PoE 6.2c.884. This impacts the function setWiFiMultipleConfig of the file /cgi-bin/cstecgi.cgi. Performing a manipulation of the argument Key1Str1 results in buffer overflow. The attack can be initiated remotely. The exploit has been released to the public and may be used for attacks.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_