Skip to content
OpenAdvisories

Product · Toto Link

T6

16 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Medium 6.3
    CVE-2025-7952 EPSS 25%

    TOTOLINK T6 MQTT Packet wireless.so ckeckKeepAlive command injection

    A vulnerability classified as critical was found in TOTOLINK T6 4.1.5cu.748. This vulnerability affects the function ckeckKeepAlive of the file wireless.so of the component MQTT Packet Handler. The manipulation leads to command injection. The attack can be in…

    Toto Link T6
  • Medium 6.3
    CVE-2025-7615

    TOTOLINK T6 HTTP POST Request cstecgi.cgi clearPairCfg command injection

    A vulnerability classified as critical was found in TOTOLINK T6 4.1.5cu.748. Affected by this vulnerability is the function clearPairCfg of the file /cgi-bin/cstecgi.cgi of the component HTTP POST Request Handler. The manipulation of the argument ip leads to …

    Toto Link T6
  • Medium 6.3
    CVE-2025-7614

    TOTOLINK T6 HTTP POST Request cstecgi.cgi delDevice command injection

    A vulnerability classified as critical has been found in TOTOLINK T6 4.1.5cu.748. Affected is the function delDevice of the file /cgi-bin/cstecgi.cgi of the component HTTP POST Request Handler. The manipulation of the argument ipAddr leads to command injectio…

    Toto Link T6
  • Medium 6.3
    CVE-2025-7613

    TOTOLINK T6 HTTP POST Request cstecgi.cgi CloudSrvVersionCheck command injection

    A vulnerability was found in TOTOLINK T6 4.1.5cu.748. It has been rated as critical. This issue affects the function CloudSrvVersionCheck of the file /cgi-bin/cstecgi.cgi of the component HTTP POST Request Handler. The manipulation of the argument ip leads to…

    Toto Link T6
  • Medium 6.3
    CVE-2025-7525

    TOTOLINK T6 HTTP POST Request cstecgi.cgi setTracerouteCfg command injection

    A vulnerability was found in TOTOLINK T6 4.1.5cu.748_B20211015. It has been declared as critical. This vulnerability affects the function setTracerouteCfg of the file /cgi-bin/cstecgi.cgi of the component HTTP POST Request Handler. The manipulation of the arg…

    Toto Link T6
  • Medium 6.3
    CVE-2025-7524

    TOTOLINK T6 HTTP POST Request cstecgi.cgi setDiagnosisCfg command injection

    A vulnerability was found in TOTOLINK T6 4.1.5cu.748_B20211015. It has been classified as critical. This affects the function setDiagnosisCfg of the file /cgi-bin/cstecgi.cgi of the component HTTP POST Request Handler. The manipulation of the argument ip lead…

    Toto Link T6
  • Medium 5.3
    CVE-2023-7223

    Totolink T6 cstecgi.cgi access control

    A vulnerability classified as problematic has been found in Totolink T6 4.1.9cu.5241_B20210923. This affects an unknown part of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument topicurl with the input showSyslog leads to improper access control…

    Toto Link T6