CVE-2022-38823

CVE-2022-38823 affects TOTOLINK T6 V4.1.5cu.709_B20210518, where a hard-coded root password is stored in /etc/shadow.sample. The vulnerability is described consistently across NVD, Red Hat, CVE feeds, and CNVD references, indicating a high-severity issue with CVSS 3.1 base score 9.8 (NETWORK atta...

CVE-2022-38826

The CVE-2022-38826 issue affects TOTOLINK T6, specifically version 4.1.5cu.709_B20210518, in the cstecgi.cgi endpoint. The root cause is inadequate filtering of constructed command characters in cstecgi.cgi (sub_421504), enabling arbitrary command execution. Impact is high: remote attacker could ...

CVE-2022-38826

In TOTOLINK T6 V4.1.5cu.709B20210518, there is an execute arbitrary command in cstecgi.cgi...

CVE-2022-38827

TOTOLINK T6 V4.1.5cu.709B20210518 is vulnerable to Buffer Overflow via cstecgi.cgi...

CVE-2022-38828

TOTOLINK T6 V4.1.5cu.709B20210518 is vulnerable to command injection via cstecgi.cgi...

CVE-2022-38828

CVE-2022-38828 affects TOTOLINK T6 (version 4.1.5cu.709_B20210518). The vulnerability is a command-injection in the cstecgi.cgi endpoint, enabling arbitrary command execution. CVSSv3.1 base score 9.8 (CRITICAL) with network exposure, no privileges, no user interaction required. Public sources in ...

TOTOLINK T6 信任管理问题漏洞

TOTOLINK T6 is a wireless dual-band router from China's Gion Electronics TOTOLINK. A trust management issue vulnerability exists in TOTOLINK T6 version V4.1.5cu.709B20210518, which stems from a hardcoded password for root in /etc/shadow.sample...

TOTOLINK T6 命令注入漏洞

TOTOLINK T6 is a wireless dual-band router from China's Gion Electronics TOTOLINK. A command injection vulnerability exists in TOTOLINK T6 version V4.1.5cu.709B20210518, which stems from a buffer overflow in cstecgi.cgi...

PT-2022-24584 · Totolink · Totolink T6

Name of the Vulnerable Software and Affected Versions: TOTOLINK T6 version 4.1.5cu.709 B20210518 Description: The issue allows for the execution of arbitrary commands in the cstecgi.cgi file. Recommendations: For TOTOLINK T6 version 4.1.5cu.709 B20210518, consider disabling access to the...

TOTOLINK T6 操作系统命令注入漏洞

TOTOLINK T6 is a wireless dual-band router from China's TOTOLINK Electronics TOTOLINK that supports MQTT protocol and Telnet service. The TOTOLINK T6 suffers from a command injection vulnerability that stems from the sub421504 function in cstecgi.cgi failing to properly filter construct command...

PT-2022-24585 · Totolink · Totolink T6

Name of the Vulnerable Software and Affected Versions: TOTOLINK T6 version 4.1.5cu.709 B20210518 Description: The issue is related to a Buffer Overflow via the cstecgi.cgi endpoint. This allows for potential exploitation. No information is provided about the estimated number of potentially affect...

TOTOLINK T6 操作系统命令注入漏洞

TOTOLINK T6 is a wireless dual-band router from China's TOTOLINK Electronics TOTOLINK that supports MQTT protocol and Telnet service. The TOTOLINK T6 suffers from a command injection vulnerability that stems from the sub421AA0 function in cstecgi.cgi failing to properly filter construct command...

CVE-2022-38823: Use of Hard-coded Credentials

In TOTOLINK T6 V4.1.5cu.709B20210518, there is a hard coded password for root in /etc/shadow.sample...

CVE-2022-38827: Buffer Copy without Checking Size of Input

TOTOLINK T6 V4.1.5cu.709B20210518 is vulnerable to Buffer Overflow via cstecgi.cgi...

CVE-2022-38826: Improper Neutralization of Special Elements used in an OS Command

In TOTOLINK T6 V4.1.5cu.709B20210518, there is an execute arbitrary command in cstecgi.cgi...

PT-2022-24586 · Totolink · Totolink T6

Name of the Vulnerable Software and Affected Versions: TOTOLINK T6 version 4.1.5cu.709 B20210518 Description: The issue is related to command injection via the cstecgi.cgi endpoint. This allows for potential malicious commands to be executed. No information is provided about the estimated number ...

PT-2022-24583

Name of the Vulnerable Software and Affected Versions TOTOLINK T6 version 4.1.5cu.709 B20210518 Description The issue concerns a hard-coded password for the root user located in the /etc/shadow.sample file. This presents a significant security risk as it could allow unauthorized access to the...

CVE-2022-38828: Improper Neutralization of Special Elements used in an OS Command

TOTOLINK T6 V4.1.5cu.709B20210518 is vulnerable to command injection via cstecgi.cgi...

TOTOLINK T6 FUN_00413be4 function stack overflow vulnerability

TOTOLINK T6 is a wireless dual-band router from China Gion Electronics TOTOLINK.A stack overflow vulnerability exists in TOTOLINK T6 V4.1.9cu.5179B20201015 version, which stems from the desc parameter in the FUN00413be4 function not checking its length for input data. A remote attacker can exploi...

TOTOLINK T6 FUN_0041880c Function Stack Overflow Vulnerability

TOTOLINK T6 is a wireless dual-band router from China Gion Electronics TOTOLINK.A stack overflow vulnerability exists in TOTOLINK T6 V4.1.9cu.5179B20201015 version, which stems from the desc parameter in the FUN0041880c function not checking its length for input data. A remote attacker can exploi...