Invia #619319: TOTOLINK T6 V4.1.5cu.748 Command Injectioninformazioni

TitoloTOTOLINK T6 V4.1.5cu.748 Command Injection
DescrizioneTOTOLINK Mesh Wifi T6 router has a command injection vulnerability. This vulnerability can be triggered through the MQTT packet handler function `ckeckKeepAlive` in file `wireless.so` .An attacker can implement a RCE attack by sending a malicious MQTT packet.
Fonte⚠️ https://github.com/ElvisBlue/Public/blob/main/Vuln/7.md
Utente
 ElvisBlue (UID 87432)
Sottomissione20/07/2025 16:42 (1 Anno fa)
Moderazione21/07/2025 11:29 (19 hours later)
StatoAccettato
Voce VulDB317098 [TOTOLINK T6 4.1.5cu.748 MQTT Packet wireless.so ckeckKeepAlive escalationi di privilegi]
Punti18

Do you know our Splunk app?

Download it now for free!