CNNVD-202507-818 Information

Jul 08, 2025 cve

CNNVD ID

CNNVD-202507-818

CVE-2025-7154

CNNVD Published: 2025-07-08

Description (Chinese)

TOTOLINK N200RE是中国吉翁电子（TOTOLINK）公司的一个路由器。 TOTOLINK N200RE 9.3.5u.6095_B20200916和9.3.5u.6139_B20201216版本存在安全漏洞，该漏洞源于对文件/cgi-bin/cstecgi.cgi中参数Hostname的错误操作导致OS命令注入。

Description (English)

TOTOLINK N200RE is a router for the Chinese company TOTOLINK. TOTOLINK N200RE 9.3.5u.6095 B20200916 and 9.3.5u.6139 B20201216 contains a security loophole resulting from the mishandling of the argument Hostname in document/cgi-bin/cstecgi.cgi, resulting in the injection of the OS command.

Hazard Level

High

Vulnerability Type

其他

Affected Vendor

头歌

Published

2025-07-08

Last Modified

2026-02-24

References

https://github.com/FLY200503/IoT-vul/blob/master/Totolink/N200RE/README.md https://vuldb.com/?ctiid.315092 https://vuldb.com/?id.315092 https://vuldb.com/?submit.606230 https://www.totolink.net/

Patch

https://www.totolink.net/home/menu/detail/menu_listtpl/download/id/204/ids/36.html

Share on: