GCVE - cpe:2.3:h:totolink:t10_v2:-:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:h:totolink:t10_v2:-:*:*:*:*:*:*:*

part: h version: - update: *

Vendor	Totolink (`fa0129e6-aa24-5784-be77-22d8becdb79b`)
Product	T10 V2 (`deac5c69-a27f-5136-a58d-85e6280f1c4f`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2023-40042`	not_vulnerable	2026-06-08 06:09:41.108004	Details available TOTOLINK T10_v2 5.9c.5061_B20200511 has a stack-based buffer overflow in setStaticDhcpConfig in /lib/cste_modules/lan.so. Attackers can send crafted data in an MQTT packet, via the comment parameter, to control the return address and execute code. Published: 2023-08-08T00:00:00.000Z Updated: 2024-10-10T19:39:02.065Z Open on db.gcve.eu Reference links http://www.totolink.cn https://github.com/Korey0sh1/IoT_vuln/blob/main/TOTOLINK/T10_V2/setStaticDhcpConfig.md https://www.totolink.net/home/menu/detail/menu_listtpl/download/id/172/ids/36.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-40042`	vulnerable	2026-06-08 06:09:41.107915	Details available TOTOLINK T10_v2 5.9c.5061_B20200511 has a stack-based buffer overflow in setStaticDhcpConfig in /lib/cste_modules/lan.so. Attackers can send crafted data in an MQTT packet, via the comment parameter, to control the return address and execute code. Published: 2023-08-08T00:00:00.000Z Updated: 2024-10-10T19:39:02.065Z Open on db.gcve.eu Reference links http://www.totolink.cn https://github.com/Korey0sh1/IoT_vuln/blob/main/TOTOLINK/T10_V2/setStaticDhcpConfig.md https://www.totolink.net/home/menu/detail/menu_listtpl/download/id/172/ids/36.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-40041`	not_vulnerable	2026-06-08 06:09:41.107538	Details available TOTOLINK T10_v2 5.9c.5061_B20200511 has a stack-based buffer overflow in setWiFiWpsConfig in /lib/cste_modules/wps.so. Attackers can send crafted data in an MQTT packet, via the pin parameter, to control the return address and execute code. Published: 2023-08-08T00:00:00.000Z Updated: 2024-10-10T19:45:20.814Z Open on db.gcve.eu Reference links https://github.com/Korey0sh1/IoT_vuln/blob/main/TOTOLINK/T10_V2/lib-cste_modules-wps.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-40041`	vulnerable	2026-06-08 06:09:41.106428	Details available TOTOLINK T10_v2 5.9c.5061_B20200511 has a stack-based buffer overflow in setWiFiWpsConfig in /lib/cste_modules/wps.so. Attackers can send crafted data in an MQTT packet, via the pin parameter, to control the return address and execute code. Published: 2023-08-08T00:00:00.000Z Updated: 2024-10-10T19:45:20.814Z Open on db.gcve.eu Reference links https://github.com/Korey0sh1/IoT_vuln/blob/main/TOTOLINK/T10_V2/lib-cste_modules-wps.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-25081`	not_vulnerable	2026-06-08 05:41:45.164181	Details available TOTOLink T10 V5.9c.5061_B20200511 was discovered to contain a command injection vulnerability in the "Main" function. This vulnerability allows attackers to execute arbitrary commands via the QUERY_STRING parameter. Published: 2022-02-22T22:44:10.000Z Updated: 2024-08-03T04:29:01.591Z Open on db.gcve.eu Reference links https://github.com/EPhaha/IOT_vuln/blob/main/TOTOLink/T10/README.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-43636`	not_vulnerable	2026-06-08 05:36:43.651002	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.