TOTOLINK T6 Firmware V4.1.5cu.748 B20211015
Approved changes feed: RSS · Atom
cpe:2.3:o:totolink:t6_firmware:v4.1.5cu.748_b20211015:*:*:*:*:*:*:*
part: o version: v4.1.5cu.748_b20211015 update: *
| Vendor | Totolink (fa0129e6-aa24-5784-be77-22d8becdb79b) |
|---|---|
| Product | T6 Firmware (ad20e864-15ba-58db-9884-d66dc79e3e9a) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-8170 |
vulnerable | 2026-06-08 07:45:19.739037 |
TOTOLINK T6 MQTT Packet meshSlaveDlfw tcpcheck_net buffer overflow
HIGH (8.8)
A vulnerability classified as critical was found in TOTOLINK T6 4.1.5cu.748_B20211015. This vulnerability affects the function tcpcheck_net of the file /router/meshSlaveDlfw of the component MQTT Packet Handler. The manipulation of the argument serverIp leads to buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-07-25T21:02:07.203Z
Updated: 2025-07-28T14:53:25.227Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-7952 |
vulnerable | 2026-06-08 07:45:18.559214 |
TOTOLINK T6 MQTT Packet wireless.so ckeckKeepAlive command injection
MEDIUM (6.3)
A vulnerability classified as critical was found in TOTOLINK T6 4.1.5cu.748. This vulnerability affects the function ckeckKeepAlive of the file wireless.so of the component MQTT Packet Handler. The manipulation leads to command injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-07-22T03:02:06.302Z
Updated: 2025-07-22T18:20:24.625Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-7913 |
vulnerable | 2026-06-08 07:45:18.497432 |
TOTOLINK T6 MQTT Service updateWifiInfo buffer overflow
HIGH (8.8)
A vulnerability, which was classified as critical, was found in TOTOLINK T6 4.1.5cu.748_B20211015. Affected is the function updateWifiInfo of the component MQTT Service. The manipulation of the argument serverIp leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-07-20T23:32:09.106Z
Updated: 2025-07-21T18:13:46.020Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-7912 |
vulnerable | 2026-06-08 07:45:18.496848 |
TOTOLINK T6 MQTT Service recvSlaveUpgstatus buffer overflow
HIGH (8.8)
A vulnerability, which was classified as critical, has been found in TOTOLINK T6 4.1.5cu.748_B20211015. This issue affects the function recvSlaveUpgstatus of the component MQTT Service. The manipulation of the argument s leads to buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-07-20T23:02:08.791Z
Updated: 2025-07-21T18:13:05.998Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-7862 |
vulnerable | 2026-06-08 07:45:18.408719 |
TOTOLINK T6 Telnet Service cstecgi.cgi setTelnetCfg missing authentication
HIGH (7.3)
A vulnerability has been found in TOTOLINK T6 4.1.5cu.748_B20211015 and classified as critical. Affected by this vulnerability is the function setTelnetCfg of the file /cgi-bin/cstecgi.cgi of the component Telnet Service. The manipulation of the argument telnet_enabled with the input 1 leads to missing authentication. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-07-20T02:02:08.415Z
Updated: 2025-07-22T14:14:27.289Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-7837 |
vulnerable | 2026-06-08 07:45:18.301028 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-7758 |
vulnerable | 2026-06-08 07:45:18.176085 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-7615 |
vulnerable | 2026-06-08 07:45:17.773310 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-7614 |
vulnerable | 2026-06-08 07:45:17.772881 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-7613 |
vulnerable | 2026-06-08 07:45:17.770555 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-7525 |
vulnerable | 2026-06-08 07:45:17.600587 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-7524 |
vulnerable | 2026-06-08 07:45:17.600141 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-7460 |
vulnerable | 2026-06-08 07:45:17.445265 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-6916 |
vulnerable | 2026-06-08 07:43:16.647179 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-25137 |
vulnerable | 2026-06-08 05:41:45.202570 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-25136 |
vulnerable | 2026-06-08 05:41:45.201737 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-25135 |
vulnerable | 2026-06-08 05:41:45.201404 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-25134 |
vulnerable | 2026-06-08 05:41:45.200991 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-25133 |
vulnerable | 2026-06-08 05:41:45.200680 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-25132 |
vulnerable | 2026-06-08 05:41:45.200225 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-25131 |
vulnerable | 2026-06-08 05:41:45.199515 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-25130 |
vulnerable | 2026-06-08 05:41:45.197536 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.