PT-2026-72071 · Totolink · A800R

Panda_0X1

·

CVE-2026-19847

·

Published

2026-08-14

·

Updated

2026-08-18

CVSS v2.0

9.0

High

VectorAV:N/AC:L/Au:S/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions TOTOLINK A800R version 4.1.2cu.5137 B20200730
Description A stack-based buffer overflow occurs when manipulating the pin argument within the setWiFiWpsConfig() function of the /cgi-bin/cstecgi.cgi endpoint, located in the wps.so component. This flaw allows for remote attacks.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Stack Overflow

Buffer Overflow

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-121CWE-119

Related Identifiers

CVE-2026-19847

Affected Products

A800R