Login Request a demo
TF
Product
T6 Firmware
by Totolink · last CVE Jul 25, 2025
39
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities39In the news0Timeline
Severity mix
Critical 15High 23Medium 1Low 0
Severity
All severities39Critical15High23Medium1Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add T6 Firmware to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-7862
9.8
1%
Jul 20
TOTOLINK T6 Telnet Service cstecgi.cgi setTelnetCfg missing authentication
Affected: v4.1.5cu.748_b20211015
CVE-2023-7221
9.8
2%
Jan 9
A vulnerability was found in Totolink T6 4.1.9cu.5241_B20210923
Affected: 4.1.9cu.5241_b20210923
CVE-2022-38828
9.8
20%
Sep 16
TOTOLINK T6 V4.1.5cu.709_B20210518 is vulnerable to command injection via cstecgi.cgi
Affected: 4.1.5cu.709_b20210518
CVE-2022-38827
9.8
13%
Sep 16
TOTOLINK T6 V4.1.5cu.709_B20210518 is vulnerable to Buffer Overflow via cstecgi.cgi
Affected: 4.1.5cu.709_b20210518
CVE-2022-38826
9.8
1%
Sep 16
In TOTOLINK T6 V4.1.5cu.709_B20210518, there is an execute arbitrary command in cstecgi.cgi
Affected: 4.1.5cu.709_b20210518
CVE-2022-38823
9.8
1%
Sep 16
In TOTOLINK T6 V4.1.5cu.709_B20210518, there is a hard coded password for root in /etc/shadow.sample
Affected: 4.1.5cu.709_b20210518
CVE-2022-25084
9.8
22%
Feb 24
TOTOLink T6 V5.9c.4085_B20190428 was discovered to contain a command injection vulnerability in the "Main" function
Affected: 5.9c.4085_b20190428
CVE-2022-25137
9.8
2%
Feb 19
A command injection vulnerability in the function recvSlaveUpgstatus of TOTOLINK Technology routers T6 V3_Firmware T6_V3_V4.1.5cu.748_B20211015 and T10 V2_Firmware…
Affected: v4.1.5cu.748_b20211015
CVE-2022-25136
9.8
2%
Feb 19
A command injection vulnerability in the function meshSlaveUpdate of TOTOLINK Technology routers T6 V3_Firmware T6_V3_V4.1.5cu.748_B20211015 and T10 V2_Firmware…
Affected: v4.1.5cu.748_b20211015
CVE-2022-25135
9.8
3%
Feb 19
A command injection vulnerability in the function recv_mesh_info_sync of TOTOLINK Technology router T6 V3_Firmware T6_V3_V4.1.5cu.748_B20211015 allows attackers to execute…
Affected: v4.1.5cu.748_b20211015
CVE-2022-25134
9.8
3%
Feb 19
A command injection vulnerability in the function setUpgradeFW of TOTOLINK Technology router T6 V3_Firmware T6_V3_V4.1.5cu.748_B20211015 allows attackers to execute arbitrary…
Affected: v4.1.5cu.748_b20211015
CVE-2022-25133
9.8
3%
Feb 19
A command injection vulnerability in the function isAssocPriDevice of TOTOLINK Technology router T6 V3_Firmware T6_V3_V4.1.5cu.748_B20211015 allows attackers to execute arbitrary…
Affected: v4.1.5cu.748_b20211015
CVE-2022-25132
9.8
3%
Feb 19
A command injection vulnerability in the function meshSlaveDlfw of TOTOLINK Technology router T6 V3_Firmware T6_V3_V4.1.5cu.748_B20211015 allows attackers to execute arbitrary…
Affected: v4.1.5cu.748_b20211015
CVE-2022-25131
9.8
2%
Feb 19
A command injection vulnerability in the function recvSlaveCloudCheckStatus of TOTOLINK Technology routers T6 V3_Firmware T6_V3_V4.1.5cu.748_B20211015 and T10 V2_Firmware…
Affected: v4.1.5cu.748_b20211015
CVE-2022-25130
9.8
2%
Feb 19
A command injection vulnerability in the function updateWifiInfo of TOTOLINK Technology routers T6 V3_Firmware T6_V3_V4.1.5cu.748_B20211015 and T10 V2_Firmware…
Affected: v4.1.5cu.748_b20211015
Showing 15