TOTOLINK T6 Firmware 4.1.9cu.5241 B20210923
Approved changes feed: RSS · Atom
cpe:2.3:o:totolink:t6_firmware:4.1.9cu.5241_b20210923:*:*:*:*:*:*:*
part: o version: 4.1.9cu.5241_b20210923 update: *
| Vendor | Totolink (fa0129e6-aa24-5784-be77-22d8becdb79b) |
|---|---|
| Product | T6 Firmware (ad20e864-15ba-58db-9884-d66dc79e3e9a) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-7223 |
vulnerable | 2026-06-08 06:21:57.330818 |
Totolink T6 cstecgi.cgi access control
MEDIUM (5.3)
A vulnerability classified as problematic has been found in Totolink T6 4.1.9cu.5241_B20210923. This affects an unknown part of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument topicurl with the input showSyslog leads to improper access controls. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-249867. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2024-01-09T15:31:04.597Z
Updated: 2025-06-17T20:39:18.514Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-7221 |
vulnerable | 2026-06-08 06:21:57.326279 |
Totolink T6 HTTP POST Request main buffer overflow
CRITICAL (9.8)
A vulnerability was found in Totolink T6 4.1.9cu.5241_B20210923. It has been classified as critical. This affects the function main of the file /cgi-bin/cstecgi.cgi?action=login of the component HTTP POST Request Handler. The manipulation of the argument v41 leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-249855. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2024-01-09T14:00:05.614Z
Updated: 2025-05-14T19:09:36.052Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.