5 matches found
EUVD-2026-69202
Incorrect access control in the updateSlaveIpList function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to overwrite the slave IP inventory state via sending a crafted MQTT message to the csbroker component...
CVE-2026-51754
Incorrect access control in the updateSlaveIpList function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to overwrite the slave IP inventory state via sending a crafted MQTT message to the csbroker component...
CVE-2026-51754
An incorrect access control flaw in the updateSlaveIpList function of the TOTOLINK T6 (firmware 4.1.5cu.748_B20211015) allows unauthenticated attackers to overwrite the slave IP inventory state by sending a crafted MQTT message to the cs_broker component. The vulnerability is described at the fun...
CVE-2025-5902
A vulnerability was found in TOTOLINK T10 4.1.8cu.5207 and classified as critical. This issue affects the function setUpgradeFW of the file /cgi-bin/cstecgi.cgi of the component POST Request Handler. The manipulation of the argument slaveIpList leads to buffer overflow. The attack may be initiate...