Cpe:2.3:a:totolink:ca300_poe:*:*:*:*:*:*:*:* - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/cpes/cpe2.3atotolinkca300_poe/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioSat, 07 Nov 2026 09:58:16 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgTOTOLINK CA300-PoE: Buffer overflow vulnerability (CVE-2026-123958)https://feed.craftedsignal.io/briefs/2026-11-totolink-buffer-overflow-ef78ab51/Sat, 07 Nov 2026 09:58:16 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-11-totolink-buffer-overflow-ef78ab51/A buffer overflow vulnerability was identified in the setLanConfig function of TOTOLINK CA300-PoE 6.2c.884.<p>A buffer overflow vulnerability (CVE-2026-123958) was identified in the setLanConfig function of the /cgi-bin/cstecgi.cgi file in TOTOLINK CA300-PoE version 6.2c.884. Manipulation of the lanDns, lanSecDns, or langType arguments leads to a buffer overflow. The attack can be launched remotely, and the exploit is publicly available.</p> criticaladvisoryTOTOLINK CA300-PoE: Buffer overflow in setIpQosRules (CVE-2026-123957)https://feed.craftedsignal.io/briefs/2026-11-totolink-cve-2026-123957/Sat, 07 Nov 2026 09:58:07 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-11-totolink-cve-2026-123957/A buffer overflow vulnerability has been identified in the setIpQosRules function of TOTOLINK CA300-PoE firmware 6.2c.884, which can be initiated remotely.<p>A vulnerability exists in the setIpQosRules function within the /cgi-bin/cstecgi.cgi file of TOTOLINK CA300-PoE firmware version 6.2c.884. Manipulation of the ipStart argument causes a buffer overflow. The attack can be initiated remotely, and the exploit has been publicly disclosed.</p> criticaladvisory