Vulnerabilities > Totolink

DATE CVE VULNERABILITY TITLE RISK
2022-02-24 CVE-2022-25083 OS Command Injection vulnerability in Totolink A860R Firmware 4.1.2Cu.5182B20201027
TOTOLink A860R V4.1.2cu.5182_B20201027 was discovered to contain a command injection vulnerability in the "Main" function.
network
low complexity
totolink CWE-78
critical
9.8
2022-02-24 CVE-2022-25084 OS Command Injection vulnerability in Totolink T6 Firmware 5.9C.4085B20190428
TOTOLink T6 V5.9c.4085_B20190428 was discovered to contain a command injection vulnerability in the "Main" function.
network
low complexity
totolink CWE-78
critical
9.8
2022-02-19 CVE-2022-25130 Command Injection vulnerability in Totolink T10 Firmware and T6 Firmware
A command injection vulnerability in the function updateWifiInfo of TOTOLINK Technology routers T6 V3_Firmware T6_V3_V4.1.5cu.748_B20211015 and T10 V2_Firmware V4.1.8cu.5207_B20210320 allows attackers to execute arbitrary commands via a crafted MQTT packet.
network
low complexity
totolink CWE-77
critical
9.8
2022-02-19 CVE-2022-25131 Command Injection vulnerability in Totolink T10 Firmware and T6 Firmware
A command injection vulnerability in the function recvSlaveCloudCheckStatus of TOTOLINK Technology routers T6 V3_Firmware T6_V3_V4.1.5cu.748_B20211015 and T10 V2_Firmware V4.1.8cu.5207_B20210320 allows attackers to execute arbitrary commands via a crafted MQTT packet.
network
low complexity
totolink CWE-77
critical
9.8
2022-02-19 CVE-2022-25132 Command Injection vulnerability in Totolink T10 Firmware and T6 Firmware
A command injection vulnerability in the function meshSlaveDlfw of TOTOLINK Technology router T6 V3_Firmware T6_V3_V4.1.5cu.748_B20211015 allows attackers to execute arbitrary commands via a crafted MQTT packet.
network
low complexity
totolink CWE-77
critical
9.8
2022-02-19 CVE-2022-25133 Command Injection vulnerability in Totolink T6 Firmware V4.1.5Cu.748B20211015
A command injection vulnerability in the function isAssocPriDevice of TOTOLINK Technology router T6 V3_Firmware T6_V3_V4.1.5cu.748_B20211015 allows attackers to execute arbitrary commands via a crafted MQTT packet.
network
low complexity
totolink CWE-77
critical
9.8
2022-02-19 CVE-2022-25134 Command Injection vulnerability in Totolink T6 Firmware V4.1.5Cu.748B20211015
A command injection vulnerability in the function setUpgradeFW of TOTOLINK Technology router T6 V3_Firmware T6_V3_V4.1.5cu.748_B20211015 allows attackers to execute arbitrary commands via a crafted MQTT packet.
network
low complexity
totolink CWE-77
critical
9.8
2022-02-19 CVE-2022-25135 Command Injection vulnerability in Totolink T6 Firmware V4.1.5Cu.748B20211015
A command injection vulnerability in the function recv_mesh_info_sync of TOTOLINK Technology router T6 V3_Firmware T6_V3_V4.1.5cu.748_B20211015 allows attackers to execute arbitrary commands via a crafted MQTT packet.
network
low complexity
totolink CWE-77
critical
9.8
2022-02-19 CVE-2022-25136 Command Injection vulnerability in Totolink T10 Firmware and T6 Firmware
A command injection vulnerability in the function meshSlaveUpdate of TOTOLINK Technology routers T6 V3_Firmware T6_V3_V4.1.5cu.748_B20211015 and T10 V2_Firmware V4.1.8cu.5207_B20210320 allows attackers to execute arbitrary commands via a crafted MQTT packet.
network
low complexity
totolink CWE-77
critical
9.8
2022-02-19 CVE-2022-25137 Command Injection vulnerability in Totolink T10 Firmware and T6 Firmware
A command injection vulnerability in the function recvSlaveUpgstatus of TOTOLINK Technology routers T6 V3_Firmware T6_V3_V4.1.5cu.748_B20211015 and T10 V2_Firmware V4.1.8cu.5207_B20210320 allows attackers to execute arbitrary commands via a crafted MQTT packet.
network
low complexity
totolink CWE-77
critical
9.8