Vulnerabilities

TI-2025-13649 CVE-2025-14964 · GHSA-4jvq-53ch-ccmg

TOTOLINK T10 cstecgi.cgi sprintf stack-based overflow

MEDIUM 50

A vulnerability has been found in TOTOLINK T10 4.1.8cu.5083_B20200521.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.01013 Published 2025-12-19 No fix listed CWE-119

TI-2025-08737 CVE-2025-9533 · GHSA-43m2-5vcp-3fpm

TOTOLINK T10 formLoginAuth.htm improper authentication

HIGH 70

A vulnerability has been found in TOTOLINK T10 4.1.8cu.5241_B20210927.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.12213 Published 2025-08-27 No fix listed CWE-287

TI-2025-28642 CVE-2025-44655 · GHSA-c4ww-38fc-m44w

In TOTOLink A7100RU V7.4, A950RG V5.9, and T10 V5.9, the chroot_local_user option is…

MEDIUM 49

In TOTOLink A7100RU V7.4, A950RG V5.9, and T10 V5.9, the chroot_local_user option is enabled in the vsftpd.conf.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00381 Published 2025-07-21 No fix listed CWE-266

TI-2025-05549 CVE-2025-6139 · GHSA-596f-hgfj-9vg7

TOTOLINK T10 shadow.sample hard-coded password

MEDIUM 44

A vulnerability, which was classified as problematic, has been found in TOTOLINK T10 4.1.8cu.5207.

CVSS 4.0LOW 2.0 Adjacent network High privileges No interaction EPSS 0.00404 Published 2025-06-16 No fix listed CWE-255

TI-2025-05548 CVE-2025-6138 · GHSA-jvv4-6597-w46c

TOTOLINK T10 HTTP POST Request cstecgi.cgi setWizardCfg buffer overflow

HIGH 73

A vulnerability classified as critical was found in TOTOLINK T10 4.1.8cu.5207.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00984 Published 2025-06-16 No fix listed CWE-119

TI-2025-05547 CVE-2025-6137 · GHSA-74cf-vfrg-899q

TOTOLINK T10 HTTP POST Request cstecgi.cgi setWiFiScheduleCfg buffer overflow

HIGH 73

A vulnerability classified as critical has been found in TOTOLINK T10 4.1.8cu.5207.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00979 Published 2025-06-16 No fix listed CWE-119

TI-2025-05331 CVE-2025-5905 · GHSA-r36p-hj2v-vj2h

TOTOLINK T10 POST Request cstecgi.cgi setWiFiRepeaterCfg buffer overflow

HIGH 73

A vulnerability was found in TOTOLINK T10 4.1.8cu.5207.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.12412 Published 2025-06-10 No fix listed CWE-119

TI-2025-05330 CVE-2025-5904 · GHSA-m742-x7cw-3g4q

TOTOLINK T10 POST Request cstecgi.cgi setWiFiMeshName buffer overflow

HIGH 73

A vulnerability was found in TOTOLINK T10 4.1.8cu.5207.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.12121 Published 2025-06-10 No fix listed CWE-119

TI-2025-05329 CVE-2025-5903 · GHSA-pwwc-x5p3-pqjj

TOTOLINK T10 POST Request cstecgi.cgi setWiFiAclRules buffer overflow

HIGH 73

A vulnerability was found in TOTOLINK T10 4.1.8cu.5207.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.12121 Published 2025-06-09 No fix listed CWE-119

TI-2025-05328 CVE-2025-5902 · GHSA-6mq6-6457-rccm

TOTOLINK T10 POST Request cstecgi.cgi setUpgradeFW buffer overflow

HIGH 73

A vulnerability was found in TOTOLINK T10 4.1.8cu.5207 and classified as critical.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.06541 Published 2025-06-09 No fix listed CWE-119

TI-2025-05327 CVE-2025-5901 · GHSA-jfcx-jqxf-6323

TOTOLINK T10 POST Request cstecgi.cgi UploadCustomModule buffer overflow

HIGH 73

A vulnerability has been found in TOTOLINK T10 4.1.8cu.5207 and classified as critical.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.06877 Published 2025-06-09 No fix listed CWE-119

TI-2025-04012 CVE-2025-4496 · GHSA-96qf-wf2v-wxvc

TOTOLINK T10/A3100R/A950RG/A800R/N600R/A3000RU/A810R cstecgi.cgi CloudACMunualUpdate buffer overflow

HIGH 73

A vulnerability was found in TOTOLINK T10, A3100R, A950RG, A800R, N600R, A3000RU and A810R 4.1.8cu.5241_B20210927.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.01231 Published 2025-05-10 No fix listed CWE-119

TI-2024-08359 CVE-2024-9001 · GHSA-4f5p-28mj-x3pv

TOTOLINK T10 cstecgi.cgi setTracerouteCfg os command injection

MEDIUM 59

A vulnerability was found in TOTOLINK T10 4.1.8cu.5207.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.03321 Published 2024-09-19 No fix listed CWE-78

TI-2024-07953 CVE-2024-8577 · GHSA-3wrj-w44v-8q9w

TOTOLINK AC1200 T8/AC1200 T10 cstecgi.cgi setStaticDhcpRules buffer overflow

HIGH 73

A vulnerability was found in TOTOLINK AC1200 T8 and AC1200 T10 4.1.5cu.861_B20230220/4.1.8cu.5207.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.01091 Published 2024-09-08 No fix listed CWE-120

TI-2024-07952 CVE-2024-8576 · GHSA-vhgg-9xrh-8xg8

TOTOLINK AC1200 T8/AC1200 T10 cstecgi.cgi setIpPortFilterRules buffer overflow

HIGH 73

A vulnerability was found in TOTOLINK AC1200 T8 and AC1200 T10 4.1.5cu.861_B20230220/4.1.8cu.5207.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.01091 Published 2024-09-08 No fix listed CWE-120

TI-2024-07949 CVE-2024-8573 · GHSA-wv89-8x46-8266

TOTOLINK AC1200 T8/AC1200 T10 cstecgi.cgi setParentalRules buffer overflow

HIGH 73

A vulnerability, which was classified as critical, was found in TOTOLINK AC1200 T8 and AC1200 T10 4.1.5cu.861_B20230220/4.1.8cu.5207.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.01419 Published 2024-09-08 No fix listed CWE-119

TI-2024-07569 CVE-2024-8162 · GHSA-fmc4-v39v-phr8

TOTOLINK T10 AC1200 Telnet Service product.ini hard-coded credentials

HIGH 81

A vulnerability classified as critical has been found in TOTOLINK T10 AC1200 4.1.8cu.5207.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.01666 Published 2024-08-26 No fix listed CWE-798

TI-2022-08856 CVE-2022-25137 · GHSA-pmgp-jxgv-gw87

A command injection vulnerability in the function recvSlaveUpgstatus of TOTOLINK…

MEDIUM 46

A command injection vulnerability in the function recvSlaveUpgstatus of TOTOLINK Technology routers T6 V3_Firmware T6_V3_V4.1.5cu.748_B20211015 and T10 V2_Firmware V4.1.8cu.5207_B20210320 allows attackers to execute arbi…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02198 Published 2022-02-18 No fix listed CWE-77

TI-2022-08855 CVE-2022-25136 · GHSA-6wc8-j6cc-j854

A command injection vulnerability in the function meshSlaveUpdate of TOTOLINK Technology…

MEDIUM 46

A command injection vulnerability in the function meshSlaveUpdate of TOTOLINK Technology routers T6 V3_Firmware T6_V3_V4.1.5cu.748_B20211015 and T10 V2_Firmware V4.1.8cu.5207_B20210320 allows attackers to execute arbitra…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02198 Published 2022-02-18 No fix listed CWE-77

TI-2022-08851 CVE-2022-25132 · GHSA-42rh-j929-h8h4

A command injection vulnerability in the function meshSlaveDlfw of TOTOLINK Technology…

MEDIUM 47

A command injection vulnerability in the function meshSlaveDlfw of TOTOLINK Technology router T6 V3_Firmware T6_V3_V4.1.5cu.748_B20211015 allows attackers to execute arbitrary commands via a crafted MQTT packet.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02909 Published 2022-02-18 No fix listed CWE-77

TI-2022-08850 CVE-2022-25131 · GHSA-3f7r-9x8g-xf8x

A command injection vulnerability in the function recvSlaveCloudCheckStatus of TOTOLINK…

MEDIUM 46

A command injection vulnerability in the function recvSlaveCloudCheckStatus of TOTOLINK Technology routers T6 V3_Firmware T6_V3_V4.1.5cu.748_B20211015 and T10 V2_Firmware V4.1.8cu.5207_B20210320 allows attackers to execu…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02198 Published 2022-02-18 No fix listed CWE-77

TI-2022-08849 CVE-2022-25130 · GHSA-cvr8-4chv-7pmq

A command injection vulnerability in the function updateWifiInfo of TOTOLINK Technology…

MEDIUM 46

A command injection vulnerability in the function updateWifiInfo of TOTOLINK Technology routers T6 V3_Firmware T6_V3_V4.1.5cu.748_B20211015 and T10 V2_Firmware V4.1.8cu.5207_B20210320 allows attackers to execute arbitrar…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02198 Published 2022-02-18 No fix listed CWE-77

Vulnerabilities

Filters