CVE Feed

    Dashboard / CVE / CVE-2025-12260

    CVE-2025-12260

    A vulnerability has been found in TOTOLINK A3300R 17.0.0cu.557_B20221024. The impacted element is the function setSyslogCfg of the file /cgi-bin/cstecgi.cgi of the component POST Parameter Handler. Such manipulation of the argument enable leads to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.

    Published:Oct 27, 2025
    Last Modified:Feb 24, 2026
    EPS:Oct 27, 2025
    EPSS Score:0.00163
    CVSS Score:8.8

    Affected Products

    Vendor
    Totolink
    Product
    A3300r
    Vendor
    Totolink
    Product
    A3300r Firmware

    Exploits

    https://github.com/noahze01/IoT-vulnerable/blob/main/TOTOLink/A3300R/setSyslogCfg.md

    Related CVEs

    CVE-2026-31159 (CVSS 6.5) — An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbi…
    CVE-2026-31160 (CVSS 6.5) — An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbi…
    CVE-2026-31162 (CVSS 6.5) — An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbi…
    CVE-2026-31177 (CVSS 9.8) — An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbi…
    CVE-2026-31168 (CVSS 6.5) — An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbi…
    CVE-2026-31163 (CVSS 6.5) — An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbi…
    CVE-2026-31167 (CVSS 6.5) — An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbi…
    CVE-2026-31178 (CVSS 9.8) — An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbi…
    CVE-2026-31181 (CVSS 9.8) — An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbi…
    CVE-2026-31174 (CVSS 6.5) — An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbi…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High