GCVE - cpe:2.3:h:totolink:t10:-:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:h:totolink:t10:-:*:*:*:*:*:*:*

part: h version: - update: *

Vendor	Totolink (`fa0129e6-aa24-5784-be77-22d8becdb79b`)
Product	T10 (`32c6858b-9f83-5500-bdf1-0f1404ee72c6`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2025-9533`	not_vulnerable	2026-06-08 07:45:22.626119	TOTOLINK T10 formLoginAuth.htm improper authentication HIGH (7.3) A vulnerability has been found in TOTOLINK T10 4.1.8cu.5241_B20210927. Affected is an unknown function of the file /formLoginAuth.htm. The manipulation of the argument authCode with the input 1 leads to improper authentication. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Published: 2025-08-27T14:32:11.071Z Updated: 2025-08-27T16:05:55.163Z Open on db.gcve.eu Reference links https://vuldb.com/?id.321552 https://vuldb.com/?ctiid.321552 https://vuldb.com/?submit.635941 https://github.com/aLtEr6/MY_test/blob/main/TOTOLINK/TOTOLINK%20T10%20Vulnerability.md https://www.totolink.net/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-6138`	not_vulnerable	2026-06-08 07:43:14.371588	TOTOLINK T10 HTTP POST Request cstecgi.cgi setWizardCfg buffer overflow HIGH (8.8) A vulnerability classified as critical was found in TOTOLINK T10 4.1.8cu.5207. Affected by this vulnerability is the function setWizardCfg of the file /cgi-bin/cstecgi.cgi of the component HTTP POST Request Handler. The manipulation of the argument ssid5g leads to buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Published: 2025-06-16T20:31:09.003Z Updated: 2025-06-17T15:25:12.912Z Open on db.gcve.eu Reference links https://vuldb.com/?id.312607 https://vuldb.com/?ctiid.312607 https://vuldb.com/?submit.592917 https://candle-throne-f75.notion.site/TOTOLINK-T10-setWizardCfg-20ddf0aa1185808892f1dbbf63e6a153?pvs=73 https://www.totolink.net/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-5905`	not_vulnerable	2026-06-08 07:37:26.008840	TOTOLINK T10 POST Request cstecgi.cgi setWiFiRepeaterCfg buffer overflow HIGH (8.8) A vulnerability was found in TOTOLINK T10 4.1.8cu.5207. It has been rated as critical. Affected by this issue is the function setWiFiRepeaterCfg of the file /cgi-bin/cstecgi.cgi of the component POST Request Handler. The manipulation of the argument Password leads to buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Published: 2025-06-10T00:00:18.830Z Updated: 2025-06-10T15:27:25.647Z Open on db.gcve.eu Reference links https://vuldb.com/?id.311678 https://vuldb.com/?ctiid.311678 https://vuldb.com/?submit.592265 https://candle-throne-f75.notion.site/TOTOLINK-T10-setWiFiRepeaterCfg-20bdf0aa118580bd8cd0da62d4d2e47f?pvs=73 https://www.totolink.net/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-5904`	not_vulnerable	2026-06-08 07:37:26.008297	TOTOLINK T10 POST Request cstecgi.cgi setWiFiMeshName buffer overflow HIGH (8.8) A vulnerability was found in TOTOLINK T10 4.1.8cu.5207. It has been declared as critical. Affected by this vulnerability is the function setWiFiMeshName of the file /cgi-bin/cstecgi.cgi of the component POST Request Handler. The manipulation of the argument device_name leads to buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Published: 2025-06-10T00:00:16.259Z Updated: 2025-06-10T15:27:34.860Z Open on db.gcve.eu Reference links https://vuldb.com/?id.311677 https://vuldb.com/?ctiid.311677 https://vuldb.com/?submit.592264 https://candle-throne-f75.notion.site/TOTOLINK-T10-setWiFiMeshName-20bdf0aa1185806eb922dbd496c4a4b4 https://www.totolink.net/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-5903`	not_vulnerable	2026-06-08 07:37:26.007634	TOTOLINK T10 POST Request cstecgi.cgi setWiFiAclRules buffer overflow HIGH (8.8) A vulnerability was found in TOTOLINK T10 4.1.8cu.5207. It has been classified as critical. Affected is the function setWiFiAclRules of the file /cgi-bin/cstecgi.cgi of the component POST Request Handler. The manipulation of the argument desc leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Published: 2025-06-09T23:31:07.307Z Updated: 2025-06-10T15:28:00.122Z Open on db.gcve.eu Reference links https://vuldb.com/?id.311676 https://vuldb.com/?ctiid.311676 https://vuldb.com/?submit.592247 https://candle-throne-f75.notion.site/TOTOLINK-T10-setWiFiAclRules-20bdf0aa118580399a8df6ba2a44c197 https://www.totolink.net/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-5902`	not_vulnerable	2026-06-08 07:37:26.007034	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-5901`	not_vulnerable	2026-06-08 07:37:26.006415	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-4496`	not_vulnerable	2026-06-08 07:29:16.331378	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-44655`	not_vulnerable	2026-06-08 07:25:10.717178	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-14964`	not_vulnerable	2026-06-08 07:06:35.446351	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-9001`	vulnerable	2026-06-08 07:00:26.442459	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-8577`	not_vulnerable	2026-06-08 07:00:24.979627	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-8576`	not_vulnerable	2026-06-08 07:00:24.978700	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-8573`	not_vulnerable	2026-06-08 07:00:24.975978	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-8162`	not_vulnerable	2026-06-08 07:00:22.799815	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-25137`	not_vulnerable	2026-06-08 05:41:45.202799	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-25136`	not_vulnerable	2026-06-08 05:41:45.202052	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-25132`	not_vulnerable	2026-06-08 05:41:45.200286	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-25131`	not_vulnerable	2026-06-08 05:41:45.199773	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-25130`	not_vulnerable	2026-06-08 05:41:45.199072	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

TOTOLINK T10

PURL mappings

Vulnerability references

Contribute