TI-2025-07475 CVE-2025-8170 · GHSA-h7jx-x34c-vc7c
TOTOLINK T6 MQTT Packet meshSlaveDlfw tcpcheck_net buffer overflow
Priority HIGH 71
A vulnerability classified as critical was found in TOTOLINK T6 4.1.5cu.748_B20211015.
Vulnerabilities
39 records
TI-2025-07274 CVE-2025-7952 · GHSA-mh37-2gxv-wprp
TOTOLINK T6 MQTT Packet wireless.so ckeckKeepAlive command injection
Priority MEDIUM 57
A vulnerability classified as critical was found in TOTOLINK T6 4.1.5cu.748.
TI-2025-07237 CVE-2025-7913 · GHSA-p5w7-xqf9-725m
TOTOLINK T6 MQTT Service updateWifiInfo buffer overflow
Priority HIGH 73
A vulnerability, which was classified as critical, was found in TOTOLINK T6 4.1.5cu.748_B20211015.
TI-2025-07236 CVE-2025-7912 · GHSA-pfrw-775r-c344
TOTOLINK T6 MQTT Service recvSlaveUpgstatus buffer overflow
Priority HIGH 73
A vulnerability, which was classified as critical, has been found in TOTOLINK T6 4.1.5cu.748_B20211015.
TI-2025-07186 CVE-2025-7862 · GHSA-vm25-8x3c-9vc3
TOTOLINK T6 Telnet Service cstecgi.cgi setTelnetCfg missing authentication
Priority HIGH 70
A vulnerability has been found in TOTOLINK T6 4.1.5cu.748_B20211015 and classified as critical.
TI-2025-07161 CVE-2025-7837 · GHSA-qxfq-qf96-fww5
TOTOLINK T6 MQTT Service recvSlaveStaInfo buffer overflow
Priority HIGH 71
A vulnerability was found in TOTOLINK T6 4.1.5cu.748_B20211015 and classified as critical.
TI-2025-07083 CVE-2025-7758 · GHSA-hp4c-rcfm-82f8
TOTOLINK T6 HTTP POST Request cstecgi.cgi setDiagnosisCfg buffer overflow
Priority HIGH 73
A vulnerability, which was classified as critical, has been found in TOTOLINK T6 up to 4.1.5cu.748_B20211015.
TI-2025-06952 CVE-2025-7615 · GHSA-5c57-5xxh-xxwp
TOTOLINK T6 HTTP POST Request cstecgi.cgi clearPairCfg command injection
Priority MEDIUM 57
A vulnerability classified as critical was found in TOTOLINK T6 4.1.5cu.748.
TI-2025-06951 CVE-2025-7614 · GHSA-x6r6-jj5x-xc42
TOTOLINK T6 HTTP POST Request cstecgi.cgi delDevice command injection
Priority MEDIUM 57
A vulnerability classified as critical has been found in TOTOLINK T6 4.1.5cu.748.
TI-2025-06950 CVE-2025-7613 · GHSA-93qm-7rvr-h5vr
TOTOLINK T6 HTTP POST Request cstecgi.cgi CloudSrvVersionCheck command injection
Priority MEDIUM 57
A vulnerability was found in TOTOLINK T6 4.1.5cu.748.
TI-2025-06862 CVE-2025-7525 · GHSA-9h9m-2xjq-cm6v
TOTOLINK T6 HTTP POST Request cstecgi.cgi setTracerouteCfg command injection
Priority MEDIUM 57
A vulnerability was found in TOTOLINK T6 4.1.5cu.748_B20211015.
TI-2025-06861 CVE-2025-7524 · GHSA-qf5m-3vrf-gwx9
TOTOLINK T6 HTTP POST Request cstecgi.cgi setDiagnosisCfg command injection
Priority MEDIUM 57
A vulnerability was found in TOTOLINK T6 4.1.5cu.748_B20211015.
TI-2025-06798 CVE-2025-7460 · GHSA-xgh4-wmvj-9mvr
TOTOLINK T6 HTTP POST Request cstecgi.cgi setWiFiAclRules buffer overflow
Priority HIGH 73
A vulnerability has been found in TOTOLINK T6 4.1.5cu.748_B20211015 and classified as critical.
TI-2025-06289 CVE-2025-6916 · GHSA-hqqv-6f9q-x66q
TOTOLINK T6 formLoginAuth.htm Form_Login missing authentication
Priority HIGH 73
A vulnerability, which was classified as critical, was found in TOTOLINK T6 4.1.5cu.748_B20211015.
TI-2023-06607 CVE-2023-7223 · GHSA-5fw3-xj86-w3c3
Totolink T6 cstecgi.cgi access control
Priority LOW 30
A vulnerability classified as problematic has been found in Totolink T6 4.1.9cu.5241_B20210923.
TI-2023-06605 CVE-2023-7221 · GHSA-c653-w7m8-34r2
Totolink T6 HTTP POST Request main buffer overflow
Priority HIGH 82
A vulnerability was found in Totolink T6 4.1.9cu.5241_B20210923.
TI-2022-18303 CVE-2022-38823 · GHSA-7qmx-qf36-vcp7
In TOTOLINK T6 V4.1.5cu.709_B20210518, there is a hard coded password for root in /etc/shadow.sample.
Priority MEDIUM 44
In TOTOLINK T6 V4.1.5cu.709_B20210518, there is a hard coded password for root in /etc/shadow.sample.
TI-2022-18304 CVE-2022-38826 · GHSA-rq4p-m4xx-74r6
In TOTOLINK T6 V4.1.5cu.709_B20210518, there is an execute arbitrary command in cstecgi.cgi.
Priority MEDIUM 45
In TOTOLINK T6 V4.1.5cu.709_B20210518, there is an execute arbitrary command in cstecgi.cgi.
TI-2022-18305 CVE-2022-38827 · GHSA-vqqm-rwvp-vgrr
TOTOLINK T6 V4.1.5cu.709_B20210518 is vulnerable to Buffer Overflow via cstecgi.cgi
Priority MEDIUM 56
TOTOLINK T6 V4.1.5cu.709_B20210518 is vulnerable to Buffer Overflow via cstecgi.cgi
TI-2022-18306 CVE-2022-38828 · GHSA-xfff-m68h-gjf7
TOTOLINK T6 V4.1.5cu.709_B20210518 is vulnerable to command injection via cstecgi.cgi
Priority MEDIUM 61
TOTOLINK T6 V4.1.5cu.709_B20210518 is vulnerable to command injection via cstecgi.cgi
TI-2022-13823 CVE-2022-32044 · GHSA-vvqg-x2xv-3m2c
TOTOLINK T6 V4.1.9cu.5179_B20201015 was discovered to contain a stack overflow via the…
Priority LOW 35
TOTOLINK T6 V4.1.9cu.5179_B20201015 was discovered to contain a stack overflow via the password parameter in the function FUN_00413f80.
TI-2022-13824 CVE-2022-32045 · GHSA-mj37-5xvh-x2wm
TOTOLINK T6 V4.1.9cu.5179_B20201015 was discovered to contain a stack overflow via the…
Priority LOW 35
TOTOLINK T6 V4.1.9cu.5179_B20201015 was discovered to contain a stack overflow via the desc parameter in the function FUN_00413be4.
TI-2022-13826 CVE-2022-32047 · GHSA-p6vj-x9g3-pxx6
TOTOLINK T6 V4.1.9cu.5179_B20201015 was discovered to contain a stack overflow via the…
Priority LOW 35
TOTOLINK T6 V4.1.9cu.5179_B20201015 was discovered to contain a stack overflow via the desc parameter in the function FUN_00412ef4.
TI-2022-13825 CVE-2022-32046 · GHSA-q42v-pp4f-9ff2
TOTOLINK T6 V4.1.9cu.5179_B20201015 was discovered to contain a stack overflow via the…
Priority LOW 35
TOTOLINK T6 V4.1.9cu.5179_B20201015 was discovered to contain a stack overflow via the desc parameter in the function FUN_0041880c.
TI-2022-13827 CVE-2022-32048 · GHSA-8pcm-89j4-mrm2
TOTOLINK T6 V4.1.9cu.5179_B20201015 was discovered to contain a stack overflow via the…
Priority LOW 35
TOTOLINK T6 V4.1.9cu.5179_B20201015 was discovered to contain a stack overflow via the command parameter in the function FUN_0041cc88.