Reisen_1943

**Name of the Vulnerable Software and Affected Versions** TOTOLINK T6 version 4.1.5cu.748 B20211015 **Description** A critical vulnerability exists in the MQTT Packet Handler component of the affected product. The vulnerability is due to a buffer overflow in the `tcpcheck net` function within the `/router/meshSlaveDlfw` file. This issue can be exploited remotely by manipulating the `serverIp` argument. The exploit for this vulnerability has been publicly disclosed. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** TOTOLINK T6 version 4.1.5cu.748 B20211015 **Description** A critical issue has been identified in the MQTT Service component of the affected software. The `recvSlaveUpgstatus` function is susceptible to a buffer overflow when the `s` argument is manipulated. This issue can be exploited remotely. The exploit for this issue has been publicly disclosed. **Recommendations** TOTOLINK T6 version 4.1.5cu.748 B20211015: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** TOTOLINK T6 version 4.1.5cu.748 B20211015 **Description** A critical issue exists in the MQTT Service component, specifically within the `updateWifiInfo()` function. Manipulation of the `serverIp` argument can lead to a buffer overflow, allowing for remote exploitation. The exploit for this issue has been publicly disclosed. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** TOTOLINK T6 version 4.1.5cu.748 B20211015 **Description** A critical vulnerability exists in the MQTT Service component of the affected software. The `recvSlaveStaInfo` function is susceptible to a buffer overflow due to manipulation of the `dest` argument. This issue can be exploited remotely. The exploit code has been publicly disclosed. **Recommendations** TOTOLINK T6 version 4.1.5cu.748 B20211015: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** TOTOLINK T6 version 4.1.5cu.748 B20211015 **Description** A critical issue exists in the Telnet Service of TOTOLINK T6. The `setTelnetCfg` function within the `/cgi-bin/cstecgi.cgi` file is susceptible to missing authentication due to the manipulation of the `telnet enabled` argument with a value of 1. This allows for remote exploitation. **Recommendations** TOTOLINK T6 version 4.1.5cu.748 B20211015: Disable the Telnet Service to prevent unauthorized access.

**Name of the Vulnerable Software and Affected Versions** TOTOLINK T6 versions prior to 4.1.5cu.748 B20211015 **Description** A critical vulnerability exists in the TOTOLINK T6 router. This issue affects the `setDiagnosisCfg` function within the `/cgi-bin/cstecgi.cgi` file of the HTTP POST Request Handler component. Manipulation of the `ip` argument can lead to a buffer overflow, potentially allowing for remote code execution. The exploit for this vulnerability has been publicly disclosed. **Recommendations** TOTOLINK T6 versions prior to 4.1.5cu.748 B20211015: Update to version 4.1.5cu.748 B20211015 or a later version to resolve this issue.