Vendor

TOTOLINK Technology

Products

CVEs

Across products

Status

Private

Products

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2022-28492	TOTOLINK Technology CPE	Cri	0.64	9.8	0.01	Mar 23, 2023	TOTOLINK Technology CPE with firmware V6.3c.566 ,allows remote attackers to bypass Login.
CVE-2022-25136	TOTOLINK Technology T6	Cri	0.64	9.8	0.02	Feb 19, 2022	A command injection vulnerability in the function meshSlaveUpdate of TOTOLINK Technology routers T6 V3_Firmware T6_V3_V4.1.5cu.748_B20211015 and T10 V2_Firmware V4.1.8cu.5207_B20210320 allows attackers to execute arbitrary commands via a crafted MQTT packet.
CVE-2022-25135	TOTOLINK Technology T6	Cri	0.64	9.8	0.03	Feb 19, 2022	A command injection vulnerability in the function recv_mesh_info_sync of TOTOLINK Technology router T6 V3_Firmware T6_V3_V4.1.5cu.748_B20211015 allows attackers to execute arbitrary commands via a crafted MQTT packet.
CVE-2022-25134	TOTOLINK Technology T6	Cri	0.64	9.8	0.03	Feb 19, 2022	A command injection vulnerability in the function setUpgradeFW of TOTOLINK Technology router T6 V3_Firmware T6_V3_V4.1.5cu.748_B20211015 allows attackers to execute arbitrary commands via a crafted MQTT packet.
CVE-2022-25132	TOTOLINK Technology T6	Cri	0.64	9.8	0.03	Feb 19, 2022	A command injection vulnerability in the function meshSlaveDlfw of TOTOLINK Technology router T6 V3_Firmware T6_V3_V4.1.5cu.748_B20211015 allows attackers to execute arbitrary commands via a crafted MQTT packet.

CVE-2022-28492CriMar 23, 2023
TOTOLINK Technology
CPE
risk 0.64cvss 9.8epss 0.01
TOTOLINK Technology CPE with firmware V6.3c.566 ,allows remote attackers to bypass Login.
CVE-2022-25136CriFeb 19, 2022
TOTOLINK Technology
T6
risk 0.64cvss 9.8epss 0.02
A command injection vulnerability in the function meshSlaveUpdate of TOTOLINK Technology routers T6 V3_Firmware T6_V3_V4.1.5cu.748_B20211015 and T10 V2_Firmware V4.1.8cu.5207_B20210320 allows attackers to execute arbitrary commands via a crafted MQTT packet.
CVE-2022-25135CriFeb 19, 2022
TOTOLINK Technology
T6
risk 0.64cvss 9.8epss 0.03
A command injection vulnerability in the function recv_mesh_info_sync of TOTOLINK Technology router T6 V3_Firmware T6_V3_V4.1.5cu.748_B20211015 allows attackers to execute arbitrary commands via a crafted MQTT packet.
CVE-2022-25134CriFeb 19, 2022
TOTOLINK Technology
T6
risk 0.64cvss 9.8epss 0.03
A command injection vulnerability in the function setUpgradeFW of TOTOLINK Technology router T6 V3_Firmware T6_V3_V4.1.5cu.748_B20211015 allows attackers to execute arbitrary commands via a crafted MQTT packet.
CVE-2022-25132CriFeb 19, 2022
TOTOLINK Technology
T6
risk 0.64cvss 9.8epss 0.03
A command injection vulnerability in the function meshSlaveDlfw of TOTOLINK Technology router T6 V3_Firmware T6_V3_V4.1.5cu.748_B20211015 allows attackers to execute arbitrary commands via a crafted MQTT packet.