EUVD Vulnerability Catalog
EUVD-2026-107581
Severity: CRITICAL
Base Score: 10
CVSS Version: 4.0
Vulnerability Description
A weakness has been identified in TOTOLINK EX200 5.2.3c.7200. This impacts the function setWiFiAclAddConfig of the file /cgi-bin/cstecgi.cgi of the component wireless.so. This manipulation of the argument macAddress causes stack-based buffer overflow. The attack can be initiated remotely. The exploit has been made available to the public and could be used for attacks.
CVSS Vector Analysis
Below is the complete, human-readable breakdown of the CVSS metric string: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P
▪
Attack Vector (AV): Network
▪
Attack Complexity (AC): Low
▪
Attack Requirements (AT): None
▪
Privileges Required (PR): None
▪
User Interaction (UI): None
▪
Vulnerability Confidentiality Impact (VC): High
▪
Vulnerability Integrity Impact (VI): High
▪
Vulnerability Availability Impact (VA): High
▪
Subsequent Confidentiality Impact (SC): High
▪
Subsequent Integrity Impact (SI): High
▪
Subsequent Availability Impact (SA): High
▪
E: P
Affected Vendors & Systems
Vendor
Totolink
References & Advisory Links
- https://vuldb.com/vuln/424742
- https://vuldb.com/vuln/424742/cti
- https://vuldb.com/cve/CVE-2026-114383
- https://vuldb.com/submit/1019883
- https://github.com/qwq-nm/CVE/blob/f5d61361eb7d846479f6d76c0aa4273e9af46d27/CVE2/report.md
- https://www.totolink.net/
- https://nvd.nist.gov/vuln/detail/CVE-2026-114383
Metadata Profile
Database Authority
European Union Agency for Cybersecurity (ENISA) EUVD
Assigner
VulDB
EPSS Probability
0
Known Aliases
CVE-2026-114383
GHSA-5mwr-gvhc-9w4r
Published On
2026-10-22
Last Updated
2026-10-22