CVE-2025-12239: Totolink a3300r Firmware

Critical severity, CVSS 9.8. EPSS: 0.8% chance of exploitation in the next 30 days.

A weakness has been identified in TOTOLINK A3300R 17.0.0cu.557_B20221024. The impacted element is the function setDdnsCfg of the file /cgi-bin/cstecgi.cgi. Executing manipulation can lead to buffer overflow. The attack may be performed from remote. The exploit has been made available to the public and could be exploited.

Affected products

• Totolink a3300r Firmware: version 17.0.0cu.557_b20221024 only

Published 2025-10-27. Last modified 2026-10-08.