Read the docs

TOTOLINK

Records1322All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical616CVSS 9.0–10.0
CVSS high434CVSS 7.0–8.9

Exploited now

TOTOLINK records in CISA KEV

No TOTOLINK vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

26 records in T8 Firmware · all components

Priority HIGH 82

A command injection vulnerability in the serverIp parameter in the function updateWifiInfo of TOTOLINK T8 V4.1.5cu allows attackers to execute arbitrary commands via a crafted MQTT packet.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02109 Published 2023-02-03 No fix listed CWE-77
Priority HIGH 82

A command injection vulnerability in the version parameter in the function recvSlaveCloudCheckStatus of TOTOLINK T8 V4.1.5cu allows attackers to execute arbitrary commands via a crafted MQTT packet.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02109 Published 2023-02-03 No fix listed CWE-77
Priority HIGH 82

A command injection vulnerability in the serverIp parameter in the function meshSlaveUpdate of TOTOLINK T8 V4.1.5cu allows attackers to execute arbitrary commands via a crafted MQTT packet.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02109 Published 2023-02-03 No fix listed CWE-77
Priority HIGH 82

A command injection vulnerability in the ip parameter in the function recvSlaveCloudCheckStatus of TOTOLINK T8 V4.1.5cu allows attackers to execute arbitrary commands via a crafted MQTT packet.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02109 Published 2023-02-03 No fix listed CWE-77
Priority HIGH 75

A vulnerability classified as critical was found in TOTOLINK AC1200 T8 4.1.5cu.861_B20230220.

CVSS 4.0CRITICAL 9.2 Network No auth No interaction EPSS 0.01332 Published 2024-09-08 No fix listed CWE-259
Priority MEDIUM 42

A vulnerability was found in TOTOLINK AC1200 T8 4.1.5cu.862_B20230228.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.0105 Published 2024-08-22 No fix listed CWE-120
Priority MEDIUM 41

A vulnerability was found in TOTOLINK AC1200 T8 4.1.5cu.862_B20230228 and classified as critical.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00795 Published 2024-08-22 No fix listed CWE-120
Priority LOW 28

A vulnerability has been found in TOTOLINK AC1200 T8 4.1.5cu.862_B20230228 and classified as critical.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.019 Published 2024-08-22 No fix listed CWE-78
Load more
Open these records in search →