Advisories · Technology
TOTOLINK T10.
Every CVE that names TOTOLINK T10 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 9.3 CriticalCritical · CVSS 9+
TOTOLINK T10 cstecgi.cgi sprintf stack-based overflow
- TOTOLINK T10
- Memory corruption
- CVSS 6.9 Medium
TOTOLINK T10 formLoginAuth.htm improper authentication
- TOTOLINK T10
- Authentication bypass
- CVSS 2.0 Low
TOTOLINK T10 shadow.sample hard-coded password
- TOTOLINK T10
- Hard-coded credentials
- CWE-255
- CVSS 8.7 High
TOTOLINK T10 HTTP POST Request cstecgi.cgi setWizardCfg buffer overflow
- TOTOLINK T10
- Memory corruption
- CVSS 8.7 High
TOTOLINK T10 HTTP POST Request cstecgi.cgi setWiFiScheduleCfg buffer overflow
- TOTOLINK T10
- Memory corruption
- CVSS 8.7 HighCritical · CVSS 7+ and EPSS
TOTOLINK T10 POST Request cstecgi.cgi setWiFiRepeaterCfg buffer overflow
- TOTOLINK T10
- Memory corruption
- CVSS 8.7 HighCritical · CVSS 7+ and EPSS
TOTOLINK T10 POST Request cstecgi.cgi setWiFiMeshName buffer overflow
- TOTOLINK T10
- Memory corruption
- CVSS 8.7 HighCritical · CVSS 7+ and EPSS
TOTOLINK T10 POST Request cstecgi.cgi setWiFiAclRules buffer overflow
- TOTOLINK T10
- Memory corruption
- CVSS 8.7 High
TOTOLINK T10 POST Request cstecgi.cgi setUpgradeFW buffer overflow
- TOTOLINK T10
- Memory corruption
- CVSS 8.7 High
TOTOLINK T10 POST Request cstecgi.cgi UploadCustomModule buffer overflow
- TOTOLINK T10
- Memory corruption
- CVSS 8.7 High
TOTOLINK T10/A3100R/A950RG/A800R/N600R/A3000RU/A810R cstecgi.cgi CloudACMunualUpdate buffer overflow
- TOTOLINK T10
- TOTOLINK A3100R
- Memory corruption
- CVSS 5.3 Medium
TOTOLINK T10 cstecgi.cgi setTracerouteCfg os command injection
- TOTOLINK T10
- Command injection