Enviar #619319: TOTOLINK T6 V4.1.5cu.748 Command Injectioninformación

TítuloTOTOLINK T6 V4.1.5cu.748 Command Injection
DescripciónTOTOLINK Mesh Wifi T6 router has a command injection vulnerability. This vulnerability can be triggered through the MQTT packet handler function `ckeckKeepAlive` in file `wireless.so` .An attacker can implement a RCE attack by sending a malicious MQTT packet.
Fuente⚠️ https://github.com/ElvisBlue/Public/blob/main/Vuln/7.md
Usuario
 ElvisBlue (UID 87432)
Sumisión2025-07-20 16:42 (hace 11 meses)
Moderación2025-07-21 11:29 (19 hours later)
EstadoAceptado
Entrada de VulDB317098 [TOTOLINK T6 4.1.5cu.748 MQTT Packet wireless.so ckeckKeepAlive escalada de privilegios]
Puntos18

Do you want to use VulDB in your project?

Use the official API to access entries easily!