TOTOLINK T10 Firmware V4.1.8cu.5207 B20210320
Approved changes feed: RSS · Atom
cpe:2.3:o:totolink:t10_firmware:v4.1.8cu.5207_b20210320:*:*:*:*:*:*:*
part: o version: v4.1.8cu.5207_b20210320 update: *
| Vendor | Totolink (fa0129e6-aa24-5784-be77-22d8becdb79b) |
|---|---|
| Product | T10 Firmware (730cca0b-4596-5de3-9eb5-7972f7549949) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2022-25137 |
vulnerable | 2026-06-08 05:41:45.202695 |
Details available
A command injection vulnerability in the function recvSlaveUpgstatus of TOTOLINK Technology routers T6 V3_Firmware T6_V3_V4.1.5cu.748_B20211015 and T10 V2_Firmware V4.1.8cu.5207_B20210320 allows attackers to execute arbitrary commands via a crafted MQTT packet.
Published: 2022-02-18T23:09:22.000Z
Updated: 2024-08-03T04:29:01.648Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-25136 |
vulnerable | 2026-06-08 05:41:45.201920 |
Details available
A command injection vulnerability in the function meshSlaveUpdate of TOTOLINK Technology routers T6 V3_Firmware T6_V3_V4.1.5cu.748_B20211015 and T10 V2_Firmware V4.1.8cu.5207_B20210320 allows attackers to execute arbitrary commands via a crafted MQTT packet.
Published: 2022-02-18T23:09:21.000Z
Updated: 2024-08-03T04:29:01.884Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-25132 |
vulnerable | 2026-06-08 05:41:45.200267 |
Details available
A command injection vulnerability in the function meshSlaveDlfw of TOTOLINK Technology router T6 V3_Firmware T6_V3_V4.1.5cu.748_B20211015 allows attackers to execute arbitrary commands via a crafted MQTT packet.
Published: 2022-02-18T23:09:18.000Z
Updated: 2024-08-03T04:29:01.958Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-25131 |
vulnerable | 2026-06-08 05:41:45.199752 |
Details available
A command injection vulnerability in the function recvSlaveCloudCheckStatus of TOTOLINK Technology routers T6 V3_Firmware T6_V3_V4.1.5cu.748_B20211015 and T10 V2_Firmware V4.1.8cu.5207_B20210320 allows attackers to execute arbitrary commands via a crafted MQTT packet.
Published: 2022-02-18T23:09:17.000Z
Updated: 2024-08-03T04:29:01.655Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-25130 |
vulnerable | 2026-06-08 05:41:45.198521 |
Details available
A command injection vulnerability in the function updateWifiInfo of TOTOLINK Technology routers T6 V3_Firmware T6_V3_V4.1.5cu.748_B20211015 and T10 V2_Firmware V4.1.8cu.5207_B20210320 allows attackers to execute arbitrary commands via a crafted MQTT packet.
Published: 2022-02-18T23:09:17.000Z
Updated: 2024-08-03T04:29:01.840Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.