Skip to content
OpenAdvisories

Product · Toto Link

T6

16 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • High 8.8
    CVE-2025-8170

    TOTOLINK T6 MQTT Packet meshSlaveDlfw tcpcheck_net buffer overflow

    A vulnerability classified as critical was found in TOTOLINK T6 4.1.5cu.748_B20211015. This vulnerability affects the function tcpcheck_net of the file /router/meshSlaveDlfw of the component MQTT Packet Handler. The manipulation of the argument serverIp leads…

    Toto Link T6
  • High 8.8
    CVE-2025-7913

    TOTOLINK T6 MQTT Service updateWifiInfo buffer overflow

    A vulnerability, which was classified as critical, was found in TOTOLINK T6 4.1.5cu.748_B20211015. Affected is the function updateWifiInfo of the component MQTT Service. The manipulation of the argument serverIp leads to buffer overflow. It is possible to lau…

    Toto Link T6
  • High 8.8
    CVE-2025-7912

    TOTOLINK T6 MQTT Service recvSlaveUpgstatus buffer overflow

    A vulnerability, which was classified as critical, has been found in TOTOLINK T6 4.1.5cu.748_B20211015. This issue affects the function recvSlaveUpgstatus of the component MQTT Service. The manipulation of the argument s leads to buffer overflow. The attack m…

    Toto Link T6
  • High 7.3
    CVE-2025-7862

    TOTOLINK T6 Telnet Service cstecgi.cgi setTelnetCfg missing authentication

    A vulnerability has been found in TOTOLINK T6 4.1.5cu.748_B20211015 and classified as critical. Affected by this vulnerability is the function setTelnetCfg of the file /cgi-bin/cstecgi.cgi of the component Telnet Service. The manipulation of the argument teln…

    Toto Link T6
  • High 8.8
    CVE-2025-7837

    TOTOLINK T6 MQTT Service recvSlaveStaInfo buffer overflow

    A vulnerability was found in TOTOLINK T6 4.1.5cu.748_B20211015 and classified as critical. Affected by this issue is the function recvSlaveStaInfo of the component MQTT Service. The manipulation of the argument dest leads to buffer overflow. The attack may be…

    Toto Link T6
  • High 8.8
    CVE-2025-7758

    TOTOLINK T6 HTTP POST Request cstecgi.cgi setDiagnosisCfg buffer overflow

    A vulnerability, which was classified as critical, has been found in TOTOLINK T6 up to 4.1.5cu.748_B20211015. Affected by this issue is the function setDiagnosisCfg of the file /cgi-bin/cstecgi.cgi of the component HTTP POST Request Handler. The manipulation …

    Toto Link T6
  • High 8.8
    CVE-2025-7460

    TOTOLINK T6 HTTP POST Request cstecgi.cgi setWiFiAclRules buffer overflow

    A vulnerability has been found in TOTOLINK T6 4.1.5cu.748_B20211015 and classified as critical. Affected by this vulnerability is the function setWiFiAclRules of the file /cgi-bin/cstecgi.cgi of the component HTTP POST Request Handler. The manipulation of the…

    Toto Link T6
  • High 8.8
    CVE-2025-6916 Public exploit

    TOTOLINK T6 formLoginAuth.htm Form_Login missing authentication

    A vulnerability, which was classified as critical, was found in TOTOLINK T6 4.1.5cu.748_B20211015. This affects the function Form_Login of the file /formLoginAuth.htm. The manipulation of the argument authCode/goURL leads to missing authentication. The attack…

    Toto Link T6