CVE-2025-7837 TOTOLINK T6 MQTT Service recvSlaveStaInfo buffer overflow

A vulnerability was found in TOTOLINK T6 4.1.5cu.748B20211015 and classified as critical. Affected by this issue is the function recvSlaveStaInfo of the component MQTT Service. The manipulation of the argument dest leads to buffer overflow. The attack may be launched remotely. The exploit has bee...

CVE-2025-51630

TOTOLINK N350RT V9.3.5u.6139B20201216 was discovered to contain a buffer overflow via the ePort parameter in the function setIpPortFilterRules...

CVE-2025-52046

Totolink A3300R V17.0.0cu.596B20250515 was found to contain a command injection vulnerability in the sub4197C0 function via the mac and desc parameters. This vulnerability allows unauthenticated attackers to execute arbitrary commands via a crafted request...

TOTOLINK T6 安全漏洞

TOTOLINK T6 is a wireless dual-band router from China's Gion Electronics TOTOLINK. A buffer overflow vulnerability exists in TOTOLINK T6 version 4.1.5cu.748B20211015, which originates from the parameter dest of the recvSlaveStaInfo function of the MQTT service failing to correctly validate the...

TOTOLINK T6 setWiFiAclRules function buffer overflow vulnerability

TOTOLINK T6 is a wireless dual-band router from China's TOTOLINK Electronics TOTOLINK that supports MQTT protocol and Telnet service. The TOTOLINK T6 suffers from a buffer overflow vulnerability, which originates from the parameter mac in the function setWiFiAclRules in the file...

TOTOLINK N300RB Command Injection Vulnerability

The TOTOLINK N300R is a wireless router for home and small office scenarios from Korean networking brand TOTOLINK. The TOTOLINK N300RB suffers from a command injection vulnerability that originates from the remote support feature of static key protection, which can be exploited by an attacker to...

PT-2025-30224 · Totolink · Totolink T6

Name of the Vulnerable Software and Affected Versions: TOTOLINK T6 version 4.1.5cu.748 B20211015 Description: A critical issue has been identified in the MQTT Service component of the affected software. The recvSlaveUpgstatus function is susceptible to a buffer overflow when the s argument is...

TOTOLINK T6 setTracerouteCfg function Command Injection Vulnerability

TOTOLINK T6 is a wireless dual-band router from China's TOTOLINK Electronics TOTOLINK that supports MQTT protocol and Telnet service. The TOTOLINK T6 suffers from a command injection vulnerability that originates from the failure of the parameter command of the function setTracerouteCfg in the fi...

PT-2025-30225 · Totolink · Totolink T6

Name of the Vulnerable Software and Affected Versions: TOTOLINK T6 version 4.1.5cu.748 B20211015 Description: A critical issue exists in the MQTT Service component, specifically within the updateWifiInfo function. Manipulation of the serverIp argument can lead to a buffer overflow, allowing for...

CVE-2025-7758

A vulnerability, which was classified as critical, has been found in TOTOLINK T6 up to 4.1.5cu.748B20211015. Affected by this issue is the function setDiagnosisCfg of the file /cgi-bin/cstecgi.cgi of the component HTTP POST Request Handler. The manipulation of the argument ip leads to buffer...

CVE-2025-7758

A vulnerability, which was classified as critical, has been found in TOTOLINK T6 up to 4.1.5cu.748B20211015. Affected by this issue is the function setDiagnosisCfg of the file /cgi-bin/cstecgi.cgi of the component HTTP POST Request Handler. The manipulation of the argument ip leads to buffer...

CVE-2025-7758

The CVE-2025-7758 issue affects TOTOLINK T6 firmware (versions prior to 4.1.5cu.748_B20211015). The vulnerability is in the HTTP POST Request Handler, specifically the setDiagnosisCfg function in /cgi-bin/cstecgi.cgi, where manipulating the ip argument leads to a buffer overflow. This can be expl...

CVE-2025-7758 TOTOLINK T6 HTTP POST Request cstecgi.cgi setDiagnosisCfg buffer overflow

A vulnerability, which was classified as critical, has been found in TOTOLINK T6 up to 4.1.5cu.748B20211015. Affected by this issue is the function setDiagnosisCfg of the file /cgi-bin/cstecgi.cgi of the component HTTP POST Request Handler. The manipulation of the argument ip leads to buffer...

CVE-2025-7758 TOTOLINK T6 HTTP POST Request cstecgi.cgi setDiagnosisCfg buffer overflow

A vulnerability, which was classified as critical, has been found in TOTOLINK T6 up to 4.1.5cu.748B20211015. Affected by this issue is the function setDiagnosisCfg of the file /cgi-bin/cstecgi.cgi of the component HTTP POST Request Handler. The manipulation of the argument ip leads to buffer...

CVE-2025-52046

Totolink A3300R V17.0.0cu.596B20250515 was found to contain a command injection vulnerability in the sub4197C0 function via the mac and desc parameters. This vulnerability allows unauthenticated attackers to execute arbitrary commands via a crafted request...

CVE-2025-52046

Totolink A3300R V17.0.0cu.596B20250515 was found to contain a command injection vulnerability in the sub4197C0 function via the mac and desc parameters. This vulnerability allows unauthenticated attackers to execute arbitrary commands via a crafted request...

CVE-2025-51630

TOTOLINK N350RT V9.3.5u.6139B20201216 was discovered to contain a buffer overflow via the ePort parameter in the function setIpPortFilterRules...

CVE-2025-51630

TOTOLINK N350RT V9.3.5u.6139B20201216 was discovered to contain a buffer overflow via the ePort parameter in the function setIpPortFilterRules...

TOTOLINK N350RT 安全漏洞

The TOTOLINK N350RT is a small home router from China's Gion Electronics TOTOLINK. A buffer overflow vulnerability exists in the TOTOLINK N350RT version V9.3.5u.6139B20201216, which stems from the ePort parameter failing to correctly validate the length and size of the input data, and can be...

PT-2025-29909 · Totolink · Totolink N350Rt

Name of the Vulnerable Software and Affected Versions: TOTOLINK N350RT version 9.3.5u.6139 B20201216 Description: A buffer overflow exists in TOTOLINK N350RT due to a flaw in the setIpPortFilterRules function when handling the ePort parameter. Recommendations: TOTOLINK N350RT version 9.3.5u.6139...