TOTOLINK T6 Firmware v4.1.5cu.748_b20211015

A command injection vulnerability in the function setUpgradeFW of TOTOLINK Technology router T6 V3_Firmware T6_V3_V4.1.5cu.748_B20211015 allows attackers to execute arbitrary commands via a crafted MQTT packet.

A command injection vulnerability in the function recv_mesh_info_sync of TOTOLINK Technology router T6 V3_Firmware T6_V3_V4.1.5cu.748_B20211015 allows attackers to execute arbitrary commands via a crafted MQTT packet.

A command injection vulnerability in the function meshSlaveDlfw of TOTOLINK Technology router T6 V3_Firmware T6_V3_V4.1.5cu.748_B20211015 allows attackers to execute arbitrary commands via a crafted MQTT packet.

A command injection vulnerability in the function isAssocPriDevice of TOTOLINK Technology router T6 V3_Firmware T6_V3_V4.1.5cu.748_B20211015 allows attackers to execute arbitrary commands via a crafted MQTT packet.

A command injection vulnerability in the function recvSlaveCloudCheckStatus of TOTOLINK Technology routers T6 V3_Firmware T6_V3_V4.1.5cu.748_B20211015 and T10 V2_Firmware V4.1.8cu.5207_B20210320 allows attackers to execute arbitrary commands via a crafted MQTT packet.

A command injection vulnerability in the function meshSlaveUpdate of TOTOLINK Technology routers T6 V3_Firmware T6_V3_V4.1.5cu.748_B20211015 and T10 V2_Firmware V4.1.8cu.5207_B20210320 allows attackers to execute arbitrary commands via a crafted MQTT packet.

A command injection vulnerability in the function recvSlaveUpgstatus of TOTOLINK Technology routers T6 V3_Firmware T6_V3_V4.1.5cu.748_B20211015 and T10 V2_Firmware V4.1.8cu.5207_B20210320 allows attackers to execute arbitrary commands via a crafted MQTT packet.

A command injection vulnerability in the function updateWifiInfo of TOTOLINK Technology routers T6 V3_Firmware T6_V3_V4.1.5cu.748_B20211015 and T10 V2_Firmware V4.1.8cu.5207_B20210320 allows attackers to execute arbitrary commands via a crafted MQTT packet.

TOTOLINK T6 Telnet Service cstecgi.cgi setTelnetCfg missing authentication

TOTOLINK T6 MQTT Packet meshSlaveDlfw tcpcheck_net buffer overflow

TOTOLINK T6 MQTT Service recvSlaveStaInfo buffer overflow

TOTOLINK T6 MQTT Service recvSlaveUpgstatus buffer overflow

TOTOLINK T6 HTTP POST Request cstecgi.cgi setDiagnosisCfg buffer overflow

TOTOLINK T6 MQTT Service updateWifiInfo buffer overflow

TOTOLINK T6 HTTP POST Request cstecgi.cgi setWiFiAclRules buffer overflow

TOTOLINK T6 MQTT Packet wireless.so ckeckKeepAlive command injection

TOTOLINK T6 HTTP POST Request cstecgi.cgi setDiagnosisCfg command injection

TOTOLINK T6 HTTP POST Request cstecgi.cgi setTracerouteCfg command injection

TOTOLINK T6 HTTP POST Request cstecgi.cgi CloudSrvVersionCheck command injection

TOTOLINK T6 HTTP POST Request cstecgi.cgi delDevice command injection

TOTOLINK T6 HTTP POST Request cstecgi.cgi clearPairCfg command injection

TOTOLINK T6 formLoginAuth.htm Form_Login missing authentication