Vulnerabilities > Totolink > T10 Firmware
DATE | CVE | VULNERABILITY TITLE | RISK |
---|---|---|---|
2024-09-19 | CVE-2024-9001 | OS Command Injection vulnerability in Totolink T10 Firmware 4.1.8Cu.5207 A vulnerability was found in TOTOLINK T10 4.1.8cu.5207. | 8.8 |
2024-09-08 | CVE-2024-8577 | Classic Buffer Overflow vulnerability in Totolink T10 Firmware and T8 Firmware A vulnerability was found in TOTOLINK AC1200 T8 and AC1200 T10 4.1.5cu.861_B20230220/4.1.8cu.5207. | 8.8 |
2024-09-08 | CVE-2024-8576 | Classic Buffer Overflow vulnerability in Totolink T10 Firmware and T8 Firmware A vulnerability was found in TOTOLINK AC1200 T8 and AC1200 T10 4.1.5cu.861_B20230220/4.1.8cu.5207. | 8.8 |
2024-09-08 | CVE-2024-8573 | Classic Buffer Overflow vulnerability in Totolink T10 Firmware and T8 Firmware A vulnerability, which was classified as critical, was found in TOTOLINK AC1200 T8 and AC1200 T10 4.1.5cu.861_B20230220/4.1.8cu.5207. | 8.8 |
2024-08-26 | CVE-2024-8162 | Use of Hard-coded Credentials vulnerability in Totolink T10 Firmware 4.1.8Cu.5207 A vulnerability classified as critical has been found in TOTOLINK T10 AC1200 4.1.8cu.5207. | 9.8 |
2022-02-19 | CVE-2022-25130 | Command Injection vulnerability in Totolink T10 Firmware and T6 Firmware A command injection vulnerability in the function updateWifiInfo of TOTOLINK Technology routers T6 V3_Firmware T6_V3_V4.1.5cu.748_B20211015 and T10 V2_Firmware V4.1.8cu.5207_B20210320 allows attackers to execute arbitrary commands via a crafted MQTT packet. | 9.8 |
2022-02-19 | CVE-2022-25131 | Command Injection vulnerability in Totolink T10 Firmware and T6 Firmware A command injection vulnerability in the function recvSlaveCloudCheckStatus of TOTOLINK Technology routers T6 V3_Firmware T6_V3_V4.1.5cu.748_B20211015 and T10 V2_Firmware V4.1.8cu.5207_B20210320 allows attackers to execute arbitrary commands via a crafted MQTT packet. | 9.8 |
2022-02-19 | CVE-2022-25132 | Command Injection vulnerability in Totolink T10 Firmware and T6 Firmware A command injection vulnerability in the function meshSlaveDlfw of TOTOLINK Technology router T6 V3_Firmware T6_V3_V4.1.5cu.748_B20211015 allows attackers to execute arbitrary commands via a crafted MQTT packet. | 9.8 |
2022-02-19 | CVE-2022-25136 | Command Injection vulnerability in Totolink T10 Firmware and T6 Firmware A command injection vulnerability in the function meshSlaveUpdate of TOTOLINK Technology routers T6 V3_Firmware T6_V3_V4.1.5cu.748_B20211015 and T10 V2_Firmware V4.1.8cu.5207_B20210320 allows attackers to execute arbitrary commands via a crafted MQTT packet. | 9.8 |
2022-02-19 | CVE-2022-25137 | Command Injection vulnerability in Totolink T10 Firmware and T6 Firmware A command injection vulnerability in the function recvSlaveUpgstatus of TOTOLINK Technology routers T6 V3_Firmware T6_V3_V4.1.5cu.748_B20211015 and T10 V2_Firmware V4.1.8cu.5207_B20210320 allows attackers to execute arbitrary commands via a crafted MQTT packet. | 9.8 |