TOTOLINK T6 vulnerabilities

Incorrect access control in the setStaticDhcpRules function of TOTOLINK T6 allows unauthenticated attackers to add or change static DHCP rules via a crafted POST request to /cgi-bin/cstecgi.cgi.

Incorrect access control in the setWiFiSignalCfg function of TOTOLINK T6 allows unauthenticated attackers to reduce wireless power or cause a Denial of Service (DoS) via a crafted POST request to /cgi-bin/cstecgi.cgi.

Incorrect access control in the setLanCfg function of TOTOLINK T6 allows unauthenticated attackers to alter LAN network configuration via a crafted POST request to /cgi-bin/cstecgi.cgi.

Incorrect access control in the setSyslogCfg function of TOTOLINK T6 allows unauthenticated attackers to alter logging configuration via a crafted POST request to /cgi-bin/cstecgi.cgi.

Incorrect access control in the setNtpCfg function of TOTOLINK T6 allows unauthenticated attackers to alter time synchronization settings via a crafted POST request to /cgi-bin/cstecgi.cgi.

Incorrect access control in the getCloudDownloadStatus function of TOTOLINK T6 allows unauthenticated attackers to obtain cloud firmware download state information via a crafted POST request to /cgi-bin/cstecgi.cgi.

Incorrect access control in the setLanguageCfg function of TOTOLINK T6 router (version 4.1.5cu.748_B20211015) allows unauthenticated attackers to modify language configuration via a crafted POST request to /cgi-bin/cstecgi.cgi.

Incorrect access control in the getWiFiIpMacTable function of TOTOLINK T6 router (version 4.1.5cu.748_B20211015) allows unauthenticated attackers to obtain Wi-Fi client MAC-to-IP mappings via a crafted POST request to /cgi-bin/cstecgi.cgi.

Incorrect access control in the setWizardCfg function of TOTOLINK T6 router (version 4.1.5cu.748_B20211015) allows unauthenticated attackers to reconfigure WAN, Wi-Fi, and device initialization state via a crafted POST request to /cgi-bin/cstecgi.cgi.

TOTOLINK T6 version 4.1.5cu.748_B20211015 has incorrect access control in the getTracerouteCfg function, allowing unauthenticated attackers to obtain traceroute diagnostic logs by sending a crafted POST request to /cgi-bin/cstecgi.cgi.

TOTOLINK T6 version 4.1.5cu.748_B20211015 has incorrect access control in the getTelnetCfg function, allowing unauthenticated attackers to obtain Telnet service enablement status information by sending a crafted POST request to /cgi-bin/cstecgi.cgi.

TOTOLINK T6 version 4.1.5cu.748_B20211015 has incorrect access control in the getCloudSrvCheckStatus function, allowing unauthenticated attackers to obtain cloud firmware check status information by sending a crafted POST request to /cgi-bin/cstecgi.cgi.

Incorrect access control in the getUrlFilterRules function of TOTOLINK T6 allows unauthenticated attackers to obtain DMZ configuration information by sending a crafted POST request to /cgi-bin/cstecgi.cgi.

Incorrect access control in the getDmzCfg function of TOTOLINK T6 allows unauthenticated attackers to obtain DMZ configuration information by sending a crafted POST request to /cgi-bin/cstecgi.cgi.

Incorrect access control in the getVpnPassCfg function of TOTOLINK T6 allows unauthenticated attackers to obtain VPN pass-through and WAN ping filter settings by sending a crafted POST request to /cgi-bin/cstecgi.cgi.

Incorrect access control in the getMacFilterRules function of TOTOLINK T6 allows unauthenticated attackers to obtain MAC filter rules by sending a crafted POST request to /cgi-bin/cstecgi.cgi.

Incorrect access control in the getScheduleCfg function of TOTOLINK T6 allows unauthenticated attackers to obtain schedule or scheduled-reboot configuration information by sending a crafted POST request to /cgi-bin/cstecgi.cgi.

Incorrect access control in the getStorageCfg function of TOTOLINK T6 allows unauthenticated attackers to obtain storage feature state information by sending a crafted POST request to /cgi-bin/cstecgi.cgi.

Incorrect access control in the getUPnPCfg function of TOTOLINK T6 allows unauthenticated attackers to obtain UPnP enablement and parsed port-mapping information by sending a crafted POST request to /cgi-bin/cstecgi.cgi.

Incorrect access control in the getSmartQosCfg function of TOTOLINK T6 allows unauthenticated attackers to obtain Smart QoS configuration and rules by sending a crafted POST request to /cgi-bin/cstecgi.cgi.

Incorrect access control in the getRemoteCfg function of TOTOLINK T6 allows unauthenticated attackers to obtain remote-management enablement and port information via a crafted POST request to /cgi-bin/cstecgi.cgi.

Incorrect access control in the getWanInfo function of TOTOLINK T6 allows unauthenticated attackers to obtain WAN information via a crafted POST request to /cgi-bin/cstecgi.cgi.

Incorrect access control in the getCrpcCfg function of TOTOLINK T6 allows unauthenticated attackers to obtain cloud remote-control status and URL information via a crafted POST request to /cgi-bin/cstecgi.cgi.

Incorrect access control in the getCrpcConfig function of TOTOLINK T6 allows unauthenticated attackers to obtain cloud remote-control status and URL information via a crafted POST request to /cgi-bin/cstecgi.cgi.

Incorrect access control in the getMeshRoutingTable function of TOTOLINK T6 allows unauthenticated attackers to obtain mesh routing information via a crafted POST request to /cgi-bin/cstecgi.cgi.

Incorrect access control in the getWiFiMeshConfig function of TOTOLINK T6 allows unauthenticated attackers to obtain mesh configuration and runtime state information via a crafted POST request to /cgi-bin/cstecgi.cgi.

Incorrect access control in the getMeshNeighborTable function of TOTOLINK T6 allows unauthenticated attackers to obtain mesh neighbor information via a crafted POST request to /cgi-bin/cstecgi.cgi.

Incorrect access control in the getApWiFiSchCfg function of TOTOLINK T6 allows unauthenticated attackers to obtain AP-specific Wi-Fi scheduling rules via a crafted POST request to /cgi-bin/cstecgi.cgi.

Incorrect access control in the getWiFiGuestCfg function of TOTOLINK T6 allows unauthenticated attackers to obtain guest Wi-Fi configuration information via a crafted POST request to /cgi-bin/cstecgi.cgi.

Incorrect access control in the getMeshPortalTable function of TOTOLINK T6 allows unauthenticated attackers to obtain mesh portal table information via a crafted POST request to /cgi-bin/cstecgi.cgi.

Incorrect access control in the getWiFiScheduleCfg function of TOTOLINK T6 allows unauthenticated attackers to obtain Wi-Fi scheduling rules via a crafted POST request to /cgi-bin/cstecgi.cgi.

Incorrect access control in the getWiFiBasicCfg function of TOTOLINK T6 allows unauthenticated attackers to obtain core wireless settings, including SSIDs and Wi-Fi keys, via a crafted POST request to /cgi-bin/cstecgi.cgi.

Incorrect access control in the getWiFiEasyGuestCfg function of TOTOLINK T6 allows unauthenticated attackers to obtain simplified guest Wi-Fi configuration, including guest credentials, via a crafted POST request to /cgi-bin/cstecgi.cgi.

Incorrect access control in the getWiFiAdvancedCfg function of TOTOLINK T6 allows unauthenticated attackers to obtain advanced wireless settings via a crafted POST request to /cgi-bin/cstecgi.cgi.

Incorrect access control in the getStaticDhcpRules function of TOTOLINK T6 allows unauthenticated attackers to obtain WPS runtime status via a crafted POST request to /cgi-bin/cstecgi.cgi.

Incorrect access control in the getDdnsCfg function of TOTOLINK T6 allows unauthenticated attackers to obtain DDNS configuration, including domain, username, and password, via a crafted POST request to /cgi-bin/cstecgi.cgi.

Incorrect access control in the getStaticDhcpRules function of TOTOLINK T6 allows unauthenticated attackers to obtain static DHCP reservation rules via a crafted POST request to /cgi-bin/cstecgi.cgi.

Incorrect access control in the getIptvCfg function of TOTOLINK T6 allows unauthenticated attackers to obtain IPTV and IGMP configuration information via a crafted POST request to /cgi-bin/cstecgi.cgi.

Incorrect access control in the getWiFiEasyCfg function of TOTOLINK T6 allows unauthenticated attackers to obtain sensitive information such as SSIDs and Wi-Fi keys via a crafted POST request to /cgi-bin/cstecgi.cgi.

Incorrect access control in the getStationMacByIp function of TOTOLINK T6 allows unauthenticated attackers to obtain a client MAC address via a crafted POST request to /cgi-bin/cstecgi.cgi.

Incorrect access control in the getDdnsStatus function of TOTOLINK T6 allows unauthenticated attackers to obtain DDNS runtime status and public IP information via a crafted POST request to /cgi-bin/cstecgi.cgi.

Incorrect access control in the getInitCfg function of TOTOLINK T6 allows unauthenticated attackers to obtain sensitive device configuration information via a crafted POST request to /cgi-bin/cstecgi.cgi.

Incorrect access control in the getNetInfoCfg function of TOTOLINK T6 allows unauthenticated attackers to obtain network topology and interface configuration information via a crafted POST request to /cgi-bin/cstecgi.cgi.

Incorrect access control in the getOnlineClient function of TOTOLINK T6 allows unauthenticated attackers to obtain online client information via a crafted POST request to /cgi-bin/cstecgi.cgi.

Incorrect access control in the getWizardCfg function of TOTOLINK T6 allows unauthenticated attackers to obtain setup wizard and onboarding configuration information via a crafted POST request to /cgi-bin/cstecgi.cgi.

Incorrect access control in the getSysStatusCfg function of TOTOLINK T6 allows unauthenticated attackers to obtain sensitive information such as operation mode, firmware version, serial number, WAN/LAN IP addresses, WiFi SSID, encryption keys, and connected client statistics via a crafted POST request to /cgi-bin/cstecgi.cgi.

Incorrect access control in the getWanIeCfg function of TOTOLINK T6 allows unauthenticated attackers to obtain LAN addressing and DHCP configuration information via a crafted POST request to /cgi-bin/cstecgi.cgi.

Incorrect access control in the getLanCfg function of TOTOLINK T6 allows unauthenticated attackers to obtain LAN addressing and DHCP configuration information via a crafted POST request to /cgi-bin/cstecgi.cgi.

Incorrect access control in the getAccessDeviceCfg function of TOTOLINK T6 allows unauthenticated attackers to obtain access-device policy and client state information via a crafted POST request to /cgi-bin/cstecgi.cgi.

Incorrect access control in the getDeviceInfo function of TOTOLINK T6 allows unauthenticated attackers to obtain device identification details via a crafted POST request to /cgi-bin/cstecgi.cgi.