T6 Firmware (Totolink) - vulnerabilities (CVEs)

39 CVEs, 0 in the last 30 days, 5 known versions, newest CVE from 2025-07-25. Vendor: Totolink.

CVEs of T6 Firmware

CVE-2025-8170 - CVSS 8.8 (high), 2025-07-25: A vulnerability classified as critical was found in TOTOLINK T6 4.1.5cu.748_B20211015. This vulnerability affects the function tcpcheck_net of the file…
CVE-2025-7952 - CVSS 8.8 (high), 2025-07-22: A vulnerability classified as critical was found in TOTOLINK T6 4.1.5cu.748. This vulnerability affects the function ckeckKeepAlive of the file wireless.so of…
CVE-2025-7913 - CVSS 8.8 (high), 2025-07-21: A vulnerability, which was classified as critical, was found in TOTOLINK T6 4.1.5cu.748_B20211015. Affected is the function updateWifiInfo of the component…
CVE-2025-7912 - CVSS 8.8 (high), 2025-07-20: A vulnerability, which was classified as critical, has been found in TOTOLINK T6 4.1.5cu.748_B20211015. This issue affects the function recvSlaveUpgstatus of…
CVE-2025-7862 - CVSS 9.8 (critical), 2025-07-20: A vulnerability has been found in TOTOLINK T6 4.1.5cu.748_B20211015 and classified as critical. Affected by this vulnerability is the function setTelnetCfg of…
CVE-2025-7837 - CVSS 8.8 (high), 2025-07-19: A vulnerability was found in TOTOLINK T6 4.1.5cu.748_B20211015 and classified as critical. Affected by this issue is the function recvSlaveStaInfo of the…
CVE-2025-7758 - CVSS 8.8 (high), 2025-07-17: A vulnerability, which was classified as critical, has been found in TOTOLINK T6 up to 4.1.5cu.748_B20211015. Affected by this issue is the function…
CVE-2025-7615 - CVSS 8.8 (high), 2025-07-14: A vulnerability classified as critical was found in TOTOLINK T6 4.1.5cu.748. Affected by this vulnerability is the function clearPairCfg of the file…
CVE-2025-7614 - CVSS 8.8 (high), 2025-07-14: A vulnerability classified as critical has been found in TOTOLINK T6 4.1.5cu.748. Affected is the function delDevice of the file /cgi-bin/cstecgi.cgi of the…
CVE-2025-7613 - CVSS 8.8 (high), 2025-07-14: A vulnerability was found in TOTOLINK T6 4.1.5cu.748. It has been rated as critical. This issue affects the function CloudSrvVersionCheck of the file…
CVE-2025-7525 - CVSS 8.8 (high), 2025-07-13: A vulnerability was found in TOTOLINK T6 4.1.5cu.748_B20211015. It has been declared as critical. This vulnerability affects the function setTracerouteCfg of…
CVE-2025-7524 - CVSS 8.8 (high), 2025-07-13: A vulnerability was found in TOTOLINK T6 4.1.5cu.748_B20211015. It has been classified as critical. This affects the function setDiagnosisCfg of the file…
CVE-2025-7460 - CVSS 8.8 (high), 2025-07-11: A vulnerability has been found in TOTOLINK T6 4.1.5cu.748_B20211015 and classified as critical. Affected by this vulnerability is the function setWiFiAclRules…
CVE-2025-6916 - CVSS 8.8 (high), 2025-06-30: A vulnerability, which was classified as critical, was found in TOTOLINK T6 4.1.5cu.748_B20211015. This affects the function Form_Login of the file…
CVE-2023-7223 - CVSS 6.5 (medium), 2024-01-09: A vulnerability classified as problematic has been found in Totolink T6 4.1.9cu.5241_B20210923. This affects an unknown part of the file /cgi-bin/cstecgi.cgi.…
CVE-2023-7221 - CVSS 9.8 (critical), 2024-01-09: A vulnerability was found in Totolink T6 4.1.9cu.5241_B20210923. It has been classified as critical. This affects the function main of the file…
CVE-2022-38828 - CVSS 9.8 (critical), 2022-09-16: TOTOLINK T6 V4.1.5cu.709_B20210518 is vulnerable to command injection via cstecgi.cgi
CVE-2022-38827 - CVSS 9.8 (critical), 2022-09-16: TOTOLINK T6 V4.1.5cu.709_B20210518 is vulnerable to Buffer Overflow via cstecgi.cgi
CVE-2022-38826 - CVSS 9.8 (critical), 2022-09-16: In TOTOLINK T6 V4.1.5cu.709_B20210518, there is an execute arbitrary command in cstecgi.cgi.
CVE-2022-38823 - CVSS 9.8 (critical), 2022-09-16: In TOTOLINK T6 V4.1.5cu.709_B20210518, there is a hard coded password for root in /etc/shadow.sample.
CVE-2022-32044 - CVSS 7.5 (high), 2022-07-01: TOTOLINK T6 V4.1.9cu.5179_B20201015 was discovered to contain a stack overflow via the password parameter in the function FUN_00413f80.
CVE-2022-32047 - CVSS 7.5 (high), 2022-07-01: TOTOLINK T6 V4.1.9cu.5179_B20201015 was discovered to contain a stack overflow via the desc parameter in the function FUN_00412ef4.
CVE-2022-32050 - CVSS 7.5 (high), 2022-07-01: TOTOLINK T6 V4.1.9cu.5179_B20201015 was discovered to contain a stack overflow via the cloneMac parameter in the function FUN_0041af40.
CVE-2022-32053 - CVSS 7.5 (high), 2022-07-01: TOTOLINK T6 V4.1.9cu.5179_B20201015 was discovered to contain a stack overflow via the cloneMac parameter in the function FUN_0041621c.
CVE-2022-32046 - CVSS 7.5 (high), 2022-07-01: TOTOLINK T6 V4.1.9cu.5179_B20201015 was discovered to contain a stack overflow via the desc parameter in the function FUN_0041880c.
CVE-2022-32049 - CVSS 7.5 (high), 2022-07-01: TOTOLINK T6 V4.1.9cu.5179_B20201015 was discovered to contain a stack overflow via the url parameter in the function FUN_00418540.
CVE-2022-32052 - CVSS 7.5 (high), 2022-07-01: TOTOLINK T6 V4.1.9cu.5179_B20201015 was discovered to contain a stack overflow via the desc parameter in the function FUN_004137a4.
CVE-2022-32045 - CVSS 7.5 (high), 2022-07-01: TOTOLINK T6 V4.1.9cu.5179_B20201015 was discovered to contain a stack overflow via the desc parameter in the function FUN_00413be4.
CVE-2022-32048 - CVSS 7.5 (high), 2022-07-01: TOTOLINK T6 V4.1.9cu.5179_B20201015 was discovered to contain a stack overflow via the command parameter in the function FUN_0041cc88.
CVE-2022-32051 - CVSS 7.5 (high), 2022-07-01: TOTOLINK T6 V4.1.9cu.5179_B20201015 was discovered to contain a stack overflow via the desc, week, sTime, eTime parameters in the function FUN_004133c4.
CVE-2022-25084 - CVSS 9.8 (critical), 2022-02-24: TOTOLink T6 V5.9c.4085_B20190428 was discovered to contain a command injection vulnerability in the "Main" function. This vulnerability allows attackers to…
CVE-2022-25136 - CVSS 9.8 (critical), 2022-02-19: A command injection vulnerability in the function meshSlaveUpdate of TOTOLINK Technology routers T6 V3_Firmware T6_V3_V4.1.5cu.748_B20211015 and T10…
CVE-2022-25132 - CVSS 9.8 (critical), 2022-02-19: A command injection vulnerability in the function meshSlaveDlfw of TOTOLINK Technology router T6 V3_Firmware T6_V3_V4.1.5cu.748_B20211015 allows attackers to…
CVE-2022-25135 - CVSS 9.8 (critical), 2022-02-19: A command injection vulnerability in the function recv_mesh_info_sync of TOTOLINK Technology router T6 V3_Firmware T6_V3_V4.1.5cu.748_B20211015 allows…
CVE-2022-25131 - CVSS 9.8 (critical), 2022-02-19: A command injection vulnerability in the function recvSlaveCloudCheckStatus of TOTOLINK Technology routers T6 V3_Firmware T6_V3_V4.1.5cu.748_B20211015 and T10…
CVE-2022-25134 - CVSS 9.8 (critical), 2022-02-19: A command injection vulnerability in the function setUpgradeFW of TOTOLINK Technology router T6 V3_Firmware T6_V3_V4.1.5cu.748_B20211015 allows attackers to…
CVE-2022-25137 - CVSS 9.8 (critical), 2022-02-19: A command injection vulnerability in the function recvSlaveUpgstatus of TOTOLINK Technology routers T6 V3_Firmware T6_V3_V4.1.5cu.748_B20211015 and T10…
CVE-2022-25130 - CVSS 9.8 (critical), 2022-02-19: A command injection vulnerability in the function updateWifiInfo of TOTOLINK Technology routers T6 V3_Firmware T6_V3_V4.1.5cu.748_B20211015 and T10…
CVE-2022-25133 - CVSS 9.8 (critical), 2022-02-19: A command injection vulnerability in the function isAssocPriDevice of TOTOLINK Technology router T6 V3_Firmware T6_V3_V4.1.5cu.748_B20211015 allows attackers…