Franciszek Malek

**Name of the Vulnerable Software and Affected Versions** Totolink EX1200L version 9.3.5u.6146 B20201023 **Description** A buffer overflow exists in the login functionality of the '/cgi-bin/cstecgi.cgi' endpoint. This issue can be exploited to cause a program crash or achieve remote code execution, allowing an attacker to perform root-level actions such as reading and editing data or bricking the device. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.