CVE-2026-79911
CriticalCVSS 10.0Summary
TOTOLINK N600R 4.3.0cu.7647_B20210106 has a stack-based buffer overflow vulnerability in the setSystemConfig function of /cgi-bin/cstecgi.cgi. Manipulation of the Hostname argument leads to buffer overflow, which can be exploited remotely. The exploit has been publicly disclosed.
Risk Assessment
Remote attack could lead to arbitrary code execution or device crash, potentially compromising network integrity.
Recommendation
Update the router firmware to the latest version if available. Restrict access to the admin panel and CGI interface to trusted networks only.
Original NVD description (English source)
A security vulnerability has been detected in TOTOLINK N600R 4.3.0cu.7647_B20210106. The affected element is the function setSystemConfig of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. Such manipulation of the argument Hostname leads to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed publicly and may be used.