CVE-2026-6157 - Vulnerability Analysis

Overview

Totolink A800R 4.1.2cu.5137_B20200730 contains a buffer overflow caused by manipulation of the argument apcliSsid in setAppEasyWizardConfig function in /lib/cste_modules/app.so, letting remote attackers execute code, exploit requires crafted input.

Severity & Score

Impact

Remote attackers can cause buffer overflow leading to potential remote code execution or system compromise.

Mitigation

Update to the latest version.

References

• https://vuldb.com/submit/793114
• https://vuldb.com/vuln/357037
• https://vuldb.com/vuln/357037/cti
• https://www.totolink.net/
• https://github.com/xyh4ck/iot_poc/blob/main/TOTOLINK/A800R/01_Buffer_Overflow_setAppEasyWizardConfig.md

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner