TOTOLINK T6
Approved changes feed: RSS · Atom
cpe:2.3:h:totolink:t6:-:*:*:*:*:*:*:*
part: h version: - update: *
| Vendor | Totolink (fa0129e6-aa24-5784-be77-22d8becdb79b) |
|---|---|
| Product | T6 (f91cd5c8-3d64-582f-8c15-863c249e4e26) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-7615 |
not_vulnerable | 2026-06-08 07:45:17.773456 |
TOTOLINK T6 HTTP POST Request cstecgi.cgi clearPairCfg command injection
MEDIUM (6.3)
A vulnerability classified as critical was found in TOTOLINK T6 4.1.5cu.748. Affected by this vulnerability is the function clearPairCfg of the file /cgi-bin/cstecgi.cgi of the component HTTP POST Request Handler. The manipulation of the argument ip leads to command injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-07-14T15:14:06.624Z
Updated: 2025-07-14T15:35:45.427Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-7614 |
not_vulnerable | 2026-06-08 07:45:17.772907 |
TOTOLINK T6 HTTP POST Request cstecgi.cgi delDevice command injection
MEDIUM (6.3)
A vulnerability classified as critical has been found in TOTOLINK T6 4.1.5cu.748. Affected is the function delDevice of the file /cgi-bin/cstecgi.cgi of the component HTTP POST Request Handler. The manipulation of the argument ipAddr leads to command injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-07-14T15:02:09.650Z
Updated: 2025-07-15T19:51:33.281Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-7613 |
not_vulnerable | 2026-06-08 07:45:17.772377 |
TOTOLINK T6 HTTP POST Request cstecgi.cgi CloudSrvVersionCheck command injection
MEDIUM (6.3)
A vulnerability was found in TOTOLINK T6 4.1.5cu.748. It has been rated as critical. This issue affects the function CloudSrvVersionCheck of the file /cgi-bin/cstecgi.cgi of the component HTTP POST Request Handler. The manipulation of the argument ip leads to command injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-07-14T14:44:08.080Z
Updated: 2025-07-14T15:06:28.189Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-6916 |
not_vulnerable | 2026-06-08 07:43:16.647910 |
TOTOLINK T6 formLoginAuth.htm Form_Login missing authentication
HIGH (8.8)
A vulnerability, which was classified as critical, was found in TOTOLINK T6 4.1.5cu.748_B20211015. This affects the function Form_Login of the file /formLoginAuth.htm. The manipulation of the argument authCode/goURL leads to missing authentication. The attack needs to be initiated within the local network. The exploit has been disclosed to the public and may be used.
Published: 2025-06-30T17:02:07.995Z
Updated: 2025-06-30T20:47:24.541Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-7223 |
not_vulnerable | 2026-06-08 06:21:57.330852 |
Totolink T6 cstecgi.cgi access control
MEDIUM (5.3)
A vulnerability classified as problematic has been found in Totolink T6 4.1.9cu.5241_B20210923. This affects an unknown part of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument topicurl with the input showSyslog leads to improper access controls. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-249867. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2024-01-09T15:31:04.597Z
Updated: 2025-06-17T20:39:18.514Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-7221 |
not_vulnerable | 2026-06-08 06:21:57.327272 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-32053 |
not_vulnerable | 2026-06-08 05:44:42.524859 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-32052 |
not_vulnerable | 2026-06-08 05:44:42.524388 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-32051 |
not_vulnerable | 2026-06-08 05:44:42.523872 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-32050 |
not_vulnerable | 2026-06-08 05:44:42.523323 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-32049 |
not_vulnerable | 2026-06-08 05:44:42.522777 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-32048 |
not_vulnerable | 2026-06-08 05:44:42.522371 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-32047 |
not_vulnerable | 2026-06-08 05:44:42.521825 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-32046 |
not_vulnerable | 2026-06-08 05:44:42.521176 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-32045 |
not_vulnerable | 2026-06-08 05:44:42.520583 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-32044 |
not_vulnerable | 2026-06-08 05:44:42.519716 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-25137 |
not_vulnerable | 2026-06-08 05:41:45.202593 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-25136 |
not_vulnerable | 2026-06-08 05:41:45.201760 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-25135 |
not_vulnerable | 2026-06-08 05:41:45.201425 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-25134 |
not_vulnerable | 2026-06-08 05:41:45.201099 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-25133 |
not_vulnerable | 2026-06-08 05:41:45.200701 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-25132 |
not_vulnerable | 2026-06-08 05:41:45.200248 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-25131 |
not_vulnerable | 2026-06-08 05:41:45.199646 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-25130 |
not_vulnerable | 2026-06-08 05:41:45.197581 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-25084 |
not_vulnerable | 2026-06-08 05:41:45.171339 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.