TF
Product
T6 Firmware
39
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 15High 23Medium 1Low 0
Watch
Add T6 Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-8170 | 8.8 | Jul 25 | TOTOLINK T6 MQTT Packet meshSlaveDlfw tcpcheck_net buffer overflow Affected: v4.1.5cu.748_b20211015 |
| CVE-2025-7952 | 8.8 | Jul 22 | TOTOLINK T6 MQTT Packet wireless.so ckeckKeepAlive command injection Affected: v4.1.5cu.748_b20211015 |
| CVE-2025-7913 | 8.8 | Jul 20 | TOTOLINK T6 MQTT Service updateWifiInfo buffer overflow Affected: v4.1.5cu.748_b20211015 |
| CVE-2025-7912 | 8.8 | Jul 20 | TOTOLINK T6 MQTT Service recvSlaveUpgstatus buffer overflow Affected: v4.1.5cu.748_b20211015 |
| CVE-2025-7837 | 8.8 | Jul 19 | TOTOLINK T6 MQTT Service recvSlaveStaInfo buffer overflow Affected: v4.1.5cu.748_b20211015 |
| CVE-2025-7758 | 8.8 | Jul 17 | TOTOLINK T6 HTTP POST Request cstecgi.cgi setDiagnosisCfg buffer overflow Affected: v4.1.5cu.748_b20211015 |
| CVE-2025-7615 | 8.8 | Jul 14 | TOTOLINK T6 HTTP POST Request cstecgi.cgi clearPairCfg command injection Affected: v4.1.5cu.748_b20211015 |
| CVE-2025-7614 | 8.8 | Jul 14 | TOTOLINK T6 HTTP POST Request cstecgi.cgi delDevice command injection Affected: v4.1.5cu.748_b20211015 |
| CVE-2025-7613 | 8.8 | Jul 14 | TOTOLINK T6 HTTP POST Request cstecgi.cgi CloudSrvVersionCheck command injection Affected: v4.1.5cu.748_b20211015 |
| CVE-2025-7525 | 8.8 | Jul 13 | TOTOLINK T6 HTTP POST Request cstecgi.cgi setTracerouteCfg command injection Affected: v4.1.5cu.748_b20211015 |
| CVE-2025-7524 | 8.8 | Jul 13 | TOTOLINK T6 HTTP POST Request cstecgi.cgi setDiagnosisCfg command injection Affected: v4.1.5cu.748_b20211015 |
| CVE-2025-7460 | 8.8 | Jul 11 | TOTOLINK T6 HTTP POST Request cstecgi.cgi setWiFiAclRules buffer overflow Affected: v4.1.5cu.748_b20211015 |
| CVE-2025-6916 | 8.8 | Jun 30 | TOTOLINK T6 formLoginAuth.htm Form_Login missing authentication Affected: v4.1.5cu.748_b20211015 |
| CVE-2022-32053 | 7.5 | Jul 1 | TOTOLINK T6 V4.1.9cu.5179_B20201015 was discovered to contain a stack overflow via the cloneMac parameter in the function FUN_0041621c Affected: 4.1.9cu.5179_b20201015 |
| CVE-2022-32052 | 7.5 | Jul 1 | TOTOLINK T6 V4.1.9cu.5179_B20201015 was discovered to contain a stack overflow via the desc parameter in the function FUN_004137a4 Affected: 4.1.9cu.5179_b20201015 |
| CVE-2022-32051 | 7.5 | Jul 1 | TOTOLINK T6 V4.1.9cu.5179_B20201015 was discovered to contain a stack overflow via the desc, week, sTime, eTime parameters in the function FUN_004133c4 Affected: 4.1.9cu.5179_b20201015 |
| CVE-2022-32050 | 7.5 | Jul 1 | TOTOLINK T6 V4.1.9cu.5179_B20201015 was discovered to contain a stack overflow via the cloneMac parameter in the function FUN_0041af40 Affected: 4.1.9cu.5179_b20201015 |
| CVE-2022-32049 | 7.5 | Jul 1 | TOTOLINK T6 V4.1.9cu.5179_B20201015 was discovered to contain a stack overflow via the url parameter in the function FUN_00418540 Affected: 4.1.9cu.5179_b20201015 |
| CVE-2022-32048 | 7.5 | Jul 1 | TOTOLINK T6 V4.1.9cu.5179_B20201015 was discovered to contain a stack overflow via the command parameter in the function FUN_0041cc88 Affected: 4.1.9cu.5179_b20201015 |
| CVE-2022-32047 | 7.5 | Jul 1 | TOTOLINK T6 V4.1.9cu.5179_B20201015 was discovered to contain a stack overflow via the desc parameter in the function FUN_00412ef4 Affected: 4.1.9cu.5179_b20201015 |
| CVE-2022-32046 | 7.5 | Jul 1 | TOTOLINK T6 V4.1.9cu.5179_B20201015 was discovered to contain a stack overflow via the desc parameter in the function FUN_0041880c Affected: 4.1.9cu.5179_b20201015 |
| CVE-2022-32045 | 7.5 | Jul 1 | TOTOLINK T6 V4.1.9cu.5179_B20201015 was discovered to contain a stack overflow via the desc parameter in the function FUN_00413be4 Affected: 4.1.9cu.5179_b20201015 |
| CVE-2022-32044 | 7.5 | Jul 1 | TOTOLINK T6 V4.1.9cu.5179_B20201015 was discovered to contain a stack overflow via the password parameter in the function FUN_00413f80 Affected: 4.1.9cu.5179_b20201015 |
Showing 23