TF
Product
T6 Firmware
39
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 15High 23Medium 1Low 0
Watch
Add T6 Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-7862 | 9.8 | Jul 20 | A vulnerability has been found in TOTOLINK T6 4.1.5cu.748_B20211015 and classified as critical Affected: v4.1.5cu.748_b20211015 |
| CVE-2023-7221 | 9.8 | Jan 9 | A vulnerability was found in Totolink T6 4.1.9cu.5241_B20210923 Affected: 4.1.9cu.5241_b20210923 |
| CVE-2022-38828 | 9.8 | Sep 16 | TOTOLINK T6 V4.1.5cu.709_B20210518 is vulnerable to command injection via cstecgi.cgi Affected: 4.1.5cu.709_b20210518 |
| CVE-2022-38827 | 9.8 | Sep 16 | TOTOLINK T6 V4.1.5cu.709_B20210518 is vulnerable to Buffer Overflow via cstecgi.cgi Affected: 4.1.5cu.709_b20210518 |
| CVE-2022-38826 | 9.8 | Sep 16 | In TOTOLINK T6 V4.1.5cu.709_B20210518, there is an execute arbitrary command in cstecgi.cgi Affected: 4.1.5cu.709_b20210518 |
| CVE-2022-38823 | 9.8 | Sep 16 | In TOTOLINK T6 V4.1.5cu.709_B20210518, there is a hard coded password for root in /etc/shadow.sample Affected: 4.1.5cu.709_b20210518 |
| CVE-2022-25084 | 9.8 | Feb 24 | TOTOLink T6 V5.9c.4085_B20190428 was discovered to contain a command injection vulnerability in the "Main" function Affected: 5.9c.4085_b20190428 |
| CVE-2022-25137 | 9.8 | Feb 19 | A command injection vulnerability in the function recvSlaveUpgstatus of TOTOLINK Technology routers T6 V3_Firmware T6_V3_V4.1.5cu.748_B20211015 and T10 V2_Firmware… Affected: v4.1.5cu.748_b20211015 |
| CVE-2022-25136 | 9.8 | Feb 19 | A command injection vulnerability in the function meshSlaveUpdate of TOTOLINK Technology routers T6 V3_Firmware T6_V3_V4.1.5cu.748_B20211015 and T10 V2_Firmware… Affected: v4.1.5cu.748_b20211015 |
| CVE-2022-25135 | 9.8 | Feb 19 | A command injection vulnerability in the function recv_mesh_info_sync of TOTOLINK Technology router T6 V3_Firmware T6_V3_V4.1.5cu.748_B20211015 allows attackers to execute… Affected: v4.1.5cu.748_b20211015 |
| CVE-2022-25134 | 9.8 | Feb 19 | A command injection vulnerability in the function setUpgradeFW of TOTOLINK Technology router T6 V3_Firmware T6_V3_V4.1.5cu.748_B20211015 allows attackers to execute arbitrary… Affected: v4.1.5cu.748_b20211015 |
| CVE-2022-25133 | 9.8 | Feb 19 | A command injection vulnerability in the function isAssocPriDevice of TOTOLINK Technology router T6 V3_Firmware T6_V3_V4.1.5cu.748_B20211015 allows attackers to execute arbitrary… Affected: v4.1.5cu.748_b20211015 |
| CVE-2022-25132 | 9.8 | Feb 19 | A command injection vulnerability in the function meshSlaveDlfw of TOTOLINK Technology router T6 V3_Firmware T6_V3_V4.1.5cu.748_B20211015 allows attackers to execute arbitrary… Affected: v4.1.5cu.748_b20211015 |
| CVE-2022-25131 | 9.8 | Feb 19 | A command injection vulnerability in the function recvSlaveCloudCheckStatus of TOTOLINK Technology routers T6 V3_Firmware T6_V3_V4.1.5cu.748_B20211015 and T10 V2_Firmware… Affected: v4.1.5cu.748_b20211015 |
| CVE-2022-25130 | 9.8 | Feb 19 | A command injection vulnerability in the function updateWifiInfo of TOTOLINK Technology routers T6 V3_Firmware T6_V3_V4.1.5cu.748_B20211015 and T10 V2_Firmware… Affected: v4.1.5cu.748_b20211015 |
| CVE-2025-8170 | 8.8 | Jul 25 | A vulnerability classified as critical was found in TOTOLINK T6 4.1.5cu.748_B20211015 Affected: v4.1.5cu.748_b20211015 |
| CVE-2025-7952 | 8.8 | Jul 22 | A vulnerability classified as critical was found in TOTOLINK T6 4.1.5cu.748 Affected: v4.1.5cu.748_b20211015 |
| CVE-2025-7913 | 8.8 | Jul 21 | A vulnerability, which was classified as critical, was found in TOTOLINK T6 4.1.5cu.748_B20211015 Affected: v4.1.5cu.748_b20211015 |
| CVE-2025-7912 | 8.8 | Jul 20 | A vulnerability, which was classified as critical, has been found in TOTOLINK T6 4.1.5cu.748_B20211015 Affected: v4.1.5cu.748_b20211015 |
| CVE-2025-7837 | 8.8 | Jul 19 | A vulnerability was found in TOTOLINK T6 4.1.5cu.748_B20211015 and classified as critical Affected: v4.1.5cu.748_b20211015 |
| CVE-2025-7758 | 8.8 | Jul 17 | A vulnerability, which was classified as critical, has been found in TOTOLINK T6 up to 4.1.5cu.748_B20211015 Affected: v4.1.5cu.748_b20211015 |
| CVE-2025-7615 | 8.8 | Jul 14 | A vulnerability classified as critical was found in TOTOLINK T6 4.1.5cu.748 Affected: v4.1.5cu.748_b20211015 |
| CVE-2025-7614 | 8.8 | Jul 14 | A vulnerability classified as critical has been found in TOTOLINK T6 4.1.5cu.748 Affected: v4.1.5cu.748_b20211015 |
| CVE-2025-7613 | 8.8 | Jul 14 | A vulnerability was found in TOTOLINK T6 4.1.5cu.748 Affected: v4.1.5cu.748_b20211015 |
| CVE-2025-7525 | 8.8 | Jul 13 | A vulnerability was found in TOTOLINK T6 4.1.5cu.748_B20211015 Affected: v4.1.5cu.748_b20211015 |
| CVE-2025-7524 | 8.8 | Jul 13 | A vulnerability was found in TOTOLINK T6 4.1.5cu.748_B20211015 Affected: v4.1.5cu.748_b20211015 |
| CVE-2025-7460 | 8.8 | Jul 11 | A vulnerability has been found in TOTOLINK T6 4.1.5cu.748_B20211015 and classified as critical Affected: v4.1.5cu.748_b20211015 |
| CVE-2025-6916 | 8.8 | Jun 30 | A vulnerability, which was classified as critical, was found in TOTOLINK T6 4.1.5cu.748_B20211015 Affected: v4.1.5cu.748_b20211015 |
| CVE-2022-32053 | 7.5 | Jul 1 | TOTOLINK T6 V4.1.9cu.5179_B20201015 was discovered to contain a stack overflow via the cloneMac parameter in the function FUN_0041621c Affected: 4.1.9cu.5179_b20201015 |
| CVE-2022-32052 | 7.5 | Jul 1 | TOTOLINK T6 V4.1.9cu.5179_B20201015 was discovered to contain a stack overflow via the desc parameter in the function FUN_004137a4 Affected: 4.1.9cu.5179_b20201015 |
| CVE-2022-32051 | 7.5 | Jul 1 | TOTOLINK T6 V4.1.9cu.5179_B20201015 was discovered to contain a stack overflow via the desc, week, sTime, eTime parameters in the function FUN_004133c4 Affected: 4.1.9cu.5179_b20201015 |
| CVE-2022-32050 | 7.5 | Jul 1 | TOTOLINK T6 V4.1.9cu.5179_B20201015 was discovered to contain a stack overflow via the cloneMac parameter in the function FUN_0041af40 Affected: 4.1.9cu.5179_b20201015 |
| CVE-2022-32049 | 7.5 | Jul 1 | TOTOLINK T6 V4.1.9cu.5179_B20201015 was discovered to contain a stack overflow via the url parameter in the function FUN_00418540 Affected: 4.1.9cu.5179_b20201015 |
| CVE-2022-32048 | 7.5 | Jul 1 | TOTOLINK T6 V4.1.9cu.5179_B20201015 was discovered to contain a stack overflow via the command parameter in the function FUN_0041cc88 Affected: 4.1.9cu.5179_b20201015 |
| CVE-2022-32047 | 7.5 | Jul 1 | TOTOLINK T6 V4.1.9cu.5179_B20201015 was discovered to contain a stack overflow via the desc parameter in the function FUN_00412ef4 Affected: 4.1.9cu.5179_b20201015 |
| CVE-2022-32046 | 7.5 | Jul 1 | TOTOLINK T6 V4.1.9cu.5179_B20201015 was discovered to contain a stack overflow via the desc parameter in the function FUN_0041880c Affected: 4.1.9cu.5179_b20201015 |
| CVE-2022-32045 | 7.5 | Jul 1 | TOTOLINK T6 V4.1.9cu.5179_B20201015 was discovered to contain a stack overflow via the desc parameter in the function FUN_00413be4 Affected: 4.1.9cu.5179_b20201015 |
| CVE-2022-32044 | 7.5 | Jul 1 | TOTOLINK T6 V4.1.9cu.5179_B20201015 was discovered to contain a stack overflow via the password parameter in the function FUN_00413f80 Affected: 4.1.9cu.5179_b20201015 |
| CVE-2023-7223 | 6.5 | Jan 9 | A vulnerability classified as problematic has been found in Totolink T6 4.1.9cu.5241_B20210923 Affected: 4.1.9cu.5241_b20210923 |
Showing 39