Submit #619319: TOTOLINK T6 V4.1.5cu.748 Command Injectioninfo

TitelTOTOLINK T6 V4.1.5cu.748 Command Injection
BeschreibungTOTOLINK Mesh Wifi T6 router has a command injection vulnerability. This vulnerability can be triggered through the MQTT packet handler function `ckeckKeepAlive` in file `wireless.so` .An attacker can implement a RCE attack by sending a malicious MQTT packet.
Quelle⚠️ https://github.com/ElvisBlue/Public/blob/main/Vuln/7.md
Benutzer
 ElvisBlue (UID 87432)
Einreichung20.07.2025 16:42 (vor 11 Monaten)
Moderieren21.07.2025 11:29 (19 hours later)
StatusAkzeptiert
VulDB Eintrag317098 [TOTOLINK T6 4.1.5cu.748 MQTT Packet wireless.so ckeckKeepAlive erweiterte Rechte]
Punkte18

Do you want to use VulDB in your project?

Use the official API to access entries easily!