GCVE - cpe:2.3:o:totolink:t8_firmware:v4.1.5cu:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:o:totolink:t8_firmware:v4.1.5cu:*:*:*:*:*:*:*

part: o version: v4.1.5cu update: *

Vendor	Totolink (`fa0129e6-aa24-5784-be77-22d8becdb79b`)
Product	T8 Firmware (`a35007b5-33c7-523e-a9a8-d5cb9bc64d91`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2023-24157`	vulnerable	2026-06-08 05:56:05.196785	Details available A command injection vulnerability in the serverIp parameter in the function updateWifiInfo of TOTOLINK T8 V4.1.5cu allows attackers to execute arbitrary commands via a crafted MQTT packet. Published: 2023-02-03T00:00:00.000Z Updated: 2025-03-26T14:57:30.330Z Open on db.gcve.eu Reference links https://github.com/Double-q1015/CVE-vulns/blob/main/totolink_t8/updateWifiInfo/updateWifiInfo.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-24156`	vulnerable	2026-06-08 05:56:05.196348	Details available A command injection vulnerability in the ip parameter in the function recvSlaveUpgstatus of TOTOLINK T8 V4.1.5cu allows attackers to execute arbitrary commands via a crafted MQTT packet. Published: 2023-02-03T00:00:00.000Z Updated: 2025-03-26T15:00:49.379Z Open on db.gcve.eu Reference links https://github.com/Double-q1015/CVE-vulns/blob/main/totolink_t8/recvSlaveUpgstatus/recvSlaveUpgstatus.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-24155`	vulnerable	2026-06-08 05:56:05.196008	Details available TOTOLINK T8 V4.1.5cu was discovered to contain a hard code password for the telnet service which is stored in the component /web_cste/cgi-bin/product.ini. Published: 2023-02-03T00:00:00.000Z Updated: 2025-03-26T15:28:51.557Z Open on db.gcve.eu Reference links https://github.com/Double-q1015/CVE-vulns/blob/main/totolink_t8/telnet_login/telnet_login.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-24154`	vulnerable	2026-06-08 05:56:05.195670	Details available TOTOLINK T8 V4.1.5cu was discovered to contain a command injection vulnerability via the slaveIpList parameter in the function setUpgradeFW. Published: 2023-02-03T00:00:00.000Z Updated: 2025-03-26T15:29:52.735Z Open on db.gcve.eu Reference links https://github.com/Double-q1015/CVE-vulns/blob/main/totolink_t8/setUpgradeFW/setUpgradeFW.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-24153`	vulnerable	2026-06-08 05:56:05.195319	Details available A command injection vulnerability in the version parameter in the function recvSlaveCloudCheckStatus of TOTOLINK T8 V4.1.5cu allows attackers to execute arbitrary commands via a crafted MQTT packet. Published: 2023-02-03T00:00:00.000Z Updated: 2025-03-26T15:30:44.738Z Open on db.gcve.eu Reference links https://github.com/Double-q1015/CVE-vulns/blob/main/totolink_t8/recvSlaveCloudCheckStatus_version/recvSlaveCloudCheckStatus.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-24152`	vulnerable	2026-06-08 05:56:05.194954	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-24151`	vulnerable	2026-06-08 05:56:05.194571	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-24150`	vulnerable	2026-06-08 05:56:05.193483	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.