Approved changes feed: RSS · Atom

cpe:2.3:o:totolink:t10_firmware:4.1.8cu.5241_b20210927:*:*:*:*:*:*:*

part: o version: 4.1.8cu.5241_b20210927 update: *

VendorTotolink (fa0129e6-aa24-5784-be77-22d8becdb79b)
ProductT10 Firmware (730cca0b-4596-5de3-9eb5-7972f7549949)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-9533 vulnerable 2026-06-08 07:45:22.625512 TOTOLINK T10 formLoginAuth.htm improper authentication
HIGH (7.3)
A vulnerability has been found in TOTOLINK T10 4.1.8cu.5241_B20210927. Affected is an unknown function of the file /formLoginAuth.htm. The manipulation of the argument authCode with the input 1 leads to improper authentication. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-08-27T14:32:11.071Z
Updated: 2025-08-27T16:05:55.163Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-4496 vulnerable 2026-06-08 07:29:16.330621 TOTOLINK T10/A3100R/A950RG/A800R/N600R/A3000RU/A810R cstecgi.cgi CloudACMunualUpdate buffer overflow
HIGH (8.8)
A vulnerability was found in TOTOLINK T10, A3100R, A950RG, A800R, N600R, A3000RU and A810R 4.1.8cu.5241_B20210927. It has been declared as critical. This vulnerability affects the function CloudACMunualUpdate of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument FileName leads to buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-05-10T05:00:10.763Z
Updated: 2025-05-12T19:30:55.738Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.