Soumettre #619319: TOTOLINK T6 V4.1.5cu.748 Command Injectioninformation

TitreTOTOLINK T6 V4.1.5cu.748 Command Injection
DescriptionTOTOLINK Mesh Wifi T6 router has a command injection vulnerability. This vulnerability can be triggered through the MQTT packet handler function `ckeckKeepAlive` in file `wireless.so` .An attacker can implement a RCE attack by sending a malicious MQTT packet.
La source⚠️ https://github.com/ElvisBlue/Public/blob/main/Vuln/7.md
Utilisateur
 ElvisBlue (UID 87432)
Soumission20/07/2025 16:42 (il y a 1 Année)
Modérer21/07/2025 11:29 (19 hours later)
StatutAccepté
Entrée VulDB317098 [TOTOLINK T6 4.1.5cu.748 MQTT Packet wireless.so ckeckKeepAlive élévation de privilèges]
Points18

Do you know our Splunk app?

Download it now for free!