Vulnerabilities > Totolink > T10 Firmware

DATE CVE VULNERABILITY TITLE RISK
2024-09-19 CVE-2024-9001 OS Command Injection vulnerability in Totolink T10 Firmware 4.1.8Cu.5207
A vulnerability was found in TOTOLINK T10 4.1.8cu.5207.
network
low complexity
totolink CWE-78
8.8
2024-09-08 CVE-2024-8577 Classic Buffer Overflow vulnerability in Totolink T10 Firmware and T8 Firmware
A vulnerability was found in TOTOLINK AC1200 T8 and AC1200 T10 4.1.5cu.861_B20230220/4.1.8cu.5207.
network
low complexity
totolink CWE-120
8.8
2024-09-08 CVE-2024-8576 Classic Buffer Overflow vulnerability in Totolink T10 Firmware and T8 Firmware
A vulnerability was found in TOTOLINK AC1200 T8 and AC1200 T10 4.1.5cu.861_B20230220/4.1.8cu.5207.
network
low complexity
totolink CWE-120
8.8
2024-09-08 CVE-2024-8573 Classic Buffer Overflow vulnerability in Totolink T10 Firmware and T8 Firmware
A vulnerability, which was classified as critical, was found in TOTOLINK AC1200 T8 and AC1200 T10 4.1.5cu.861_B20230220/4.1.8cu.5207.
network
low complexity
totolink CWE-120
8.8
2024-08-26 CVE-2024-8162 Use of Hard-coded Credentials vulnerability in Totolink T10 Firmware 4.1.8Cu.5207
A vulnerability classified as critical has been found in TOTOLINK T10 AC1200 4.1.8cu.5207.
network
low complexity
totolink CWE-798
critical
9.8
2022-02-19 CVE-2022-25130 Command Injection vulnerability in Totolink T10 Firmware and T6 Firmware
A command injection vulnerability in the function updateWifiInfo of TOTOLINK Technology routers T6 V3_Firmware T6_V3_V4.1.5cu.748_B20211015 and T10 V2_Firmware V4.1.8cu.5207_B20210320 allows attackers to execute arbitrary commands via a crafted MQTT packet.
network
low complexity
totolink CWE-77
critical
9.8
2022-02-19 CVE-2022-25131 Command Injection vulnerability in Totolink T10 Firmware and T6 Firmware
A command injection vulnerability in the function recvSlaveCloudCheckStatus of TOTOLINK Technology routers T6 V3_Firmware T6_V3_V4.1.5cu.748_B20211015 and T10 V2_Firmware V4.1.8cu.5207_B20210320 allows attackers to execute arbitrary commands via a crafted MQTT packet.
network
low complexity
totolink CWE-77
critical
9.8
2022-02-19 CVE-2022-25132 Command Injection vulnerability in Totolink T10 Firmware and T6 Firmware
A command injection vulnerability in the function meshSlaveDlfw of TOTOLINK Technology router T6 V3_Firmware T6_V3_V4.1.5cu.748_B20211015 allows attackers to execute arbitrary commands via a crafted MQTT packet.
network
low complexity
totolink CWE-77
critical
9.8
2022-02-19 CVE-2022-25136 Command Injection vulnerability in Totolink T10 Firmware and T6 Firmware
A command injection vulnerability in the function meshSlaveUpdate of TOTOLINK Technology routers T6 V3_Firmware T6_V3_V4.1.5cu.748_B20211015 and T10 V2_Firmware V4.1.8cu.5207_B20210320 allows attackers to execute arbitrary commands via a crafted MQTT packet.
network
low complexity
totolink CWE-77
critical
9.8
2022-02-19 CVE-2022-25137 Command Injection vulnerability in Totolink T10 Firmware and T6 Firmware
A command injection vulnerability in the function recvSlaveUpgstatus of TOTOLINK Technology routers T6 V3_Firmware T6_V3_V4.1.5cu.748_B20211015 and T10 V2_Firmware V4.1.8cu.5207_B20210320 allows attackers to execute arbitrary commands via a crafted MQTT packet.
network
low complexity
totolink CWE-77
critical
9.8