CVE-2022-25135

A command injection vulnerability in the function recvmeshinfosync of TOTOLINK Technology router T6 V3Firmware T6V3V4.1.5cu.748B20211015 allows attackers to execute arbitrary commands via a crafted MQTT packet...

CVE-2022-25133: Improper Neutralization of Special Elements used in a Command

A command injection vulnerability in the function isAssocPriDevice of TOTOLINK Technology router T6 V3Firmware T6V3V4.1.5cu.748B20211015 allows attackers to execute arbitrary commands via a crafted MQTT packet...

PT-2022-17094

Name of the Vulnerable Software and Affected Versions TOTOLINK Technology T6 V3 Firmware version T6 V3 V4.1.5cu.748 B20211015 TOTOLINK Technology T10 V2 Firmware version V4.1.8cu.5207 B20210320 Description A command injection issue in the recvSlaveUpgstatus function of TOTOLINK Technology routers...

CVE-2022-25135: Improper Neutralization of Special Elements used in a Command

A command injection vulnerability in the function recvmeshinfosync of TOTOLINK Technology router T6 V3Firmware T6V3V4.1.5cu.748B20211015 allows attackers to execute arbitrary commands via a crafted MQTT packet...

CVE-2022-25132: Improper Neutralization of Special Elements used in a Command

A command injection vulnerability in the function meshSlaveDlfw of TOTOLINK Technology router T6 V3Firmware T6V3V4.1.5cu.748B20211015 allows attackers to execute arbitrary commands via a crafted MQTT packet...

PT-2022-17092

Name of the Vulnerable Software and Affected Versions TOTOLINK Technology router T6 V3 Firmware version T6 V3 V4.1.5cu.748 B20211015 Description A command injection issue in the recv mesh info sync function allows attackers to execute arbitrary commands via a crafted MQTT packet. This can be...

PT-2022-17090

Name of the Vulnerable Software and Affected Versions TOTOLINK Technology router T6 V3 Firmware version T6 V3 V4.1.5cu.748 B20211015 Description A command injection issue in the isAssocPriDevice function allows attackers to execute arbitrary commands via a crafted MQTT packet. Recommendations For...

PT-2022-17089

Name of the Vulnerable Software and Affected Versions TOTOLINK Technology router T6 V3 Firmware version T6 V3 V4.1.5cu.748 B20211015 Description A command injection issue in the meshSlaveDlfw function allows attackers to execute arbitrary commands via a crafted MQTT packet. This enables attackers...

PT-2022-17093

Name of the Vulnerable Software and Affected Versions TOTOLINK Technology T6 V3 Firmware version T6 V3 V4.1.5cu.748 B20211015 TOTOLINK Technology T10 V2 Firmware version V4.1.8cu.5207 B20210320 Description A command injection issue in the meshSlaveUpdate function of TOTOLINK Technology routers...

PT-2022-17088

Name of the Vulnerable Software and Affected Versions TOTOLINK Technology T6 V3 Firmware version T6 V3 V4.1.5cu.748 B20211015 TOTOLINK Technology T10 V2 Firmware version V4.1.8cu.5207 B20210320 Description A command injection issue in the recvSlaveCloudCheckStatus function of TOTOLINK Technology...

CVE-2022-25134: Improper Neutralization of Special Elements used in a Command

A command injection vulnerability in the function setUpgradeFW of TOTOLINK Technology router T6 V3Firmware T6V3V4.1.5cu.748B20211015 allows attackers to execute arbitrary commands via a crafted MQTT packet...

PT-2022-17091

Name of the Vulnerable Software and Affected Versions TOTOLINK Technology router T6 V3 version T6 V3 V4.1.5cu.748 B20211015 Description A command injection issue in the setUpgradeFW function allows attackers to execute arbitrary commands via a crafted MQTT packet. This can be exploited by sending...

CVE-2018-20380

Ambit DDW2600 5.100.1009, DDW2602 5.105.1003, T60C926 4.64.1012, and U10C019 5.66.1026 devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0 SNMP requests...

How to download interim fixes to patch IBM JRE CVEs

Question A security bulletin indicates that you need to install an interim fix to patch the T6 JRE Java Runtime Environment. How do you download this interim fix? Answer IBM Security Bulletins list Common Vulnerabilities and Exposures CVE that need to be fixed in the JRE used by the T6 agent to r...