Totolink T10 Firmware vulnerabilities

22 known vulnerabilities affecting totolink/t10_firmware.

Total CVEs

22

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

CRITICAL8HIGH11MEDIUM2LOW1

Vulnerabilities

Page 2 of 2

CVE-2022-25131CRITICALCVSS 9.8vv4.1.8cu.5207_b202103202022-02-19

CVE-2022-25131 [CRITICAL] CWE-77 CVE-2022-25131: A command injection vulnerability in the function recvSlaveCloudCheckStatus of TOTOLINK Technology r A command injection vulnerability in the function recvSlaveCloudCheckStatus of TOTOLINK Technology routers T6 V3_Firmware T6_V3_V4.1.5cu.748_B20211015 and T10 V2_Firmware V4.1.8cu.5207_B20210320 allows attackers to execute arbitrary commands via a crafted MQTT packet.

CVE-2022-25136CRITICALCVSS 9.8vv4.1.8cu.5207_b202103202022-02-19

CVE-2022-25136 [CRITICAL] CWE-77 CVE-2022-25136: A command injection vulnerability in the function meshSlaveUpdate of TOTOLINK Technology routers T6 A command injection vulnerability in the function meshSlaveUpdate of TOTOLINK Technology routers T6 V3_Firmware T6_V3_V4.1.5cu.748_B20211015 and T10 V2_Firmware V4.1.8cu.5207_B20210320 allows attackers to execute arbitrary commands via a crafted MQTT packet.

← Previous2 / 2