VYPR

T10 Firmware

by Totolink

CVEs (22)

  • CVE-2024-9001MedSep 19, 2024
    risk 0.41cvss 6.3epss 0.04

    A vulnerability was found in TOTOLINK T10 4.1.8cu.5207. It has been declared as critical. This vulnerability affects the function setTracerouteCfg of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument command leads to os command injection. The attack can be…

  • CVE-2025-6139LowJun 16, 2025
    risk 0.25cvss 3.9epss 0.00

    A vulnerability, which was classified as problematic, has been found in TOTOLINK T10 4.1.8cu.5207. Affected by this issue is some unknown functionality of the file /etc/shadow.sample. The manipulation leads to use of hard-coded password. The attack can only be initiated within…

Page 2 of 2