T10 Firmware (Totolink) - vulnerabilities (CVEs)

22 CVEs, 0 in the last 30 days, 8 known versions, newest CVE from 2025-12-19. Vendor: Totolink.

CVEs of T10 Firmware

CVE-2025-14964 - CVSS 9.8 (critical), 2025-12-19: A vulnerability has been found in TOTOLINK T10 4.1.8cu.5083_B20200521. This affects the function sprintf of the file /cgi-bin/cstecgi.cgi. Such manipulation…
CVE-2025-9533 - CVSS 9.8 (critical), 2025-08-27: A vulnerability has been found in TOTOLINK T10 4.1.8cu.5241_B20210927. Affected is an unknown function of the file /formLoginAuth.htm. The manipulation of the…
CVE-2025-44655 - CVSS 9.8 (critical), 2025-07-21: In TOTOLink A7100RU V7.4, A950RG V5.9, and T10 V5.9, the chroot_local_user option is enabled in the vsftpd.conf. This could lead to unauthorized access to…
CVE-2025-6139 - CVSS 3.9 (low), 2025-06-16: A vulnerability, which was classified as problematic, has been found in TOTOLINK T10 4.1.8cu.5207. Affected by this issue is some unknown functionality of the…
CVE-2025-6138 - CVSS 8.8 (high), 2025-06-16: A vulnerability classified as critical was found in TOTOLINK T10 4.1.8cu.5207. Affected by this vulnerability is the function setWizardCfg of the file…
CVE-2025-6137 - CVSS 8.8 (high), 2025-06-16: A vulnerability classified as critical has been found in TOTOLINK T10 4.1.8cu.5207. Affected is the function setWiFiScheduleCfg of the file…
CVE-2025-5905 - CVSS 8.8 (high), 2025-06-10: A vulnerability was found in TOTOLINK T10 4.1.8cu.5207. It has been rated as critical. Affected by this issue is the function setWiFiRepeaterCfg of the file…
CVE-2025-5904 - CVSS 8.8 (high), 2025-06-10: A vulnerability was found in TOTOLINK T10 4.1.8cu.5207. It has been declared as critical. Affected by this vulnerability is the function setWiFiMeshName of…
CVE-2025-5903 - CVSS 8.8 (high), 2025-06-10: A vulnerability was found in TOTOLINK T10 4.1.8cu.5207. It has been classified as critical. Affected is the function setWiFiAclRules of the file…
CVE-2025-5902 - CVSS 8.8 (high), 2025-06-09: A vulnerability was found in TOTOLINK T10 4.1.8cu.5207 and classified as critical. This issue affects the function setUpgradeFW of the file…
CVE-2025-5901 - CVSS 8.8 (high), 2025-06-09: A vulnerability has been found in TOTOLINK T10 4.1.8cu.5207 and classified as critical. This vulnerability affects the function UploadCustomModule of the file…
CVE-2025-4496 - CVSS 9.8 (critical), 2025-05-10: A vulnerability was found in TOTOLINK T10, A3100R, A950RG, A800R, N600R, A3000RU and A810R 4.1.8cu.5241_B20210927. It has been declared as critical. This…
CVE-2024-9001 - CVSS 8.8 (high), 2024-09-19: A vulnerability was found in TOTOLINK T10 4.1.8cu.5207. It has been declared as critical. This vulnerability affects the function setTracerouteCfg of the file…
CVE-2024-8577 - CVSS 8.8 (high), 2024-09-08: A vulnerability was found in TOTOLINK AC1200 T8 and AC1200 T10 4.1.5cu.861_B20230220/4.1.8cu.5207. It has been declared as critical. Affected by this…
CVE-2024-8576 - CVSS 8.8 (high), 2024-09-08: A vulnerability was found in TOTOLINK AC1200 T8 and AC1200 T10 4.1.5cu.861_B20230220/4.1.8cu.5207. It has been classified as critical. Affected is the…
CVE-2024-8573 - CVSS 8.8 (high), 2024-09-08: A vulnerability, which was classified as critical, was found in TOTOLINK AC1200 T8 and AC1200 T10 4.1.5cu.861_B20230220/4.1.8cu.5207. This affects the…
CVE-2024-8162 - CVSS 9.8 (critical), 2024-08-26: A vulnerability classified as critical has been found in TOTOLINK T10 AC1200 4.1.8cu.5207. Affected is an unknown function of the file…
CVE-2022-25132 - CVSS 9.8 (critical), 2022-02-19: A command injection vulnerability in the function meshSlaveDlfw of TOTOLINK Technology router T6 V3_Firmware T6_V3_V4.1.5cu.748_B20211015 allows attackers to…
CVE-2022-25131 - CVSS 9.8 (critical), 2022-02-19: A command injection vulnerability in the function recvSlaveCloudCheckStatus of TOTOLINK Technology routers T6 V3_Firmware T6_V3_V4.1.5cu.748_B20211015 and T10…
CVE-2022-25137 - CVSS 9.8 (critical), 2022-02-19: A command injection vulnerability in the function recvSlaveUpgstatus of TOTOLINK Technology routers T6 V3_Firmware T6_V3_V4.1.5cu.748_B20211015 and T10…
CVE-2022-25130 - CVSS 9.8 (critical), 2022-02-19: A command injection vulnerability in the function updateWifiInfo of TOTOLINK Technology routers T6 V3_Firmware T6_V3_V4.1.5cu.748_B20211015 and T10…
CVE-2022-25136 - CVSS 9.8 (critical), 2022-02-19: A command injection vulnerability in the function meshSlaveUpdate of TOTOLINK Technology routers T6 V3_Firmware T6_V3_V4.1.5cu.748_B20211015 and T10…