CVE-2025-5904

None

CVSS

—

EPSS

11.3%

Published

Jun 10, 2025

CISA due date

—

The record

A vulnerability was found in TOTOLINK T10 4.1.8cu.5207. It has been declared as critical. Affected by this vulnerability is the function setWiFiMeshName of the file /cgi-bin/cstecgi.cgi of the component POST Request Handler. The manipulation of the argument device_name leads to buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.

Affected packages

Ecosystem	Package	Introduced	Fixed