VendorsTOTOLINKt63
Vulnerabilities

TOTOLINK T6 3

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

14CVEs
CVE-2022-38828
TOTOLINK T6 V4.1.5cu.709_B20210518 is vulnerable to command injection via cstecgi.cgi
Published 2022-09-16 · Modified
9.8EPSS 0.197
CVE-2022-38827
TOTOLINK T6 V4.1.5cu.709_B20210518 is vulnerable to Buffer Overflow via cstecgi.cgi
Published 2022-09-16 · Modified
9.8EPSS 0.122
CVE-2022-38826
In TOTOLINK T6 V4.1.5cu.709_B20210518, there is an execute arbitrary command in cstecgi.cgi.
Published 2022-09-16 · Modified
9.8EPSS 0.013
CVE-2022-38823
In TOTOLINK T6 V4.1.5cu.709_B20210518, there is a hard coded password for root in /etc/shadow.sample.
Published 2022-09-16 · Modified
9.8EPSS 0.011
CVE-2025-7862
TOTOLINK T6 Telnet Service cstecgi.cgi setTelnetCfg missing authentication
Published 2025-07-20 · Analyzed
9.8EPSS 0.011
CVE-2025-8170
TOTOLINK T6 MQTT Packet meshSlaveDlfw tcpcheck_net buffer overflow
Published 2025-07-25 · Analyzed
9.0EPSS 0.011
CVE-2025-7837
TOTOLINK T6 MQTT Service recvSlaveStaInfo buffer overflow
Published 2025-07-19 · Analyzed
9.0EPSS 0.011
CVE-2025-7912
TOTOLINK T6 MQTT Service recvSlaveUpgstatus buffer overflow
Published 2025-07-20 · Analyzed
9.0EPSS 0.011
CVE-2025-7758
TOTOLINK T6 HTTP POST Request cstecgi.cgi setDiagnosisCfg buffer overflow
Published 2025-07-17 · Analyzed
9.0EPSS 0.008
CVE-2025-7913
TOTOLINK T6 MQTT Service updateWifiInfo buffer overflow
Published 2025-07-20 · Analyzed
9.0EPSS 0.008
CVE-2025-7460
TOTOLINK T6 HTTP POST Request cstecgi.cgi setWiFiAclRules buffer overflow
Published 2025-07-11 · Analyzed
9.0EPSS 0.008
CVE-2025-7952
TOTOLINK T6 MQTT Packet wireless.so ckeckKeepAlive command injection
Published 2025-07-22 · Analyzed
8.8EPSS 0.210
CVE-2025-7524
TOTOLINK T6 HTTP POST Request cstecgi.cgi setDiagnosisCfg command injection
Published 2025-07-13 · Modified
8.8EPSS 0.028
CVE-2025-7525
TOTOLINK T6 HTTP POST Request cstecgi.cgi setTracerouteCfg command injection
Published 2025-07-13 · Modified
8.8EPSS 0.028