Totolink T8 vulnerabilities, page 2

26 vulnerabilities

Known vulnerabilities in Totolink T8, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

9.8CVE-2023-24150totolinkt8_firmware
EPSS score
2.08%
A command injection vulnerability in the serverIp parameter in the function meshSlaveDlfw of TOTOLINK T8 V4.1.5cu allows attackers to execute arbitrary commands via a crafted MQTT packet.9.8CVE-2023-24152totolinkt8_firmware
EPSS score
2.11%
A command injection vulnerability in the serverIp parameter in the function meshSlaveUpdate of TOTOLINK T8 V4.1.5cu allows attackers to execute arbitrary commands via a crafted MQTT packet.9.8CVE-2023-24157totolinkt8_firmware
EPSS score
2.11%
A command injection vulnerability in the serverIp parameter in the function updateWifiInfo of TOTOLINK T8 V4.1.5cu allows attackers to execute arbitrary commands via a crafted MQTT packet.9.8CVE-2023-24151totolinkt8_firmware
EPSS score
2.11%
A command injection vulnerability in the ip parameter in the function recvSlaveCloudCheckStatus of TOTOLINK T8 V4.1.5cu allows attackers to execute arbitrary commands via a crafted MQTT packet.9.8CVE-2023-24154totolinkt8_firmware
EPSS score
1.95%
TOTOLINK T8 V4.1.5cu was discovered to contain a command injection vulnerability via the slaveIpList parameter in the function setUpgradeFW.9.8CVE-2023-24155totolinkt8_firmware
EPSS score
0.89%
TOTOLINK T8 V4.1.5cu was discovered to contain a hard code password for the telnet service which is stored in the component /web_cste/cgi-bin/product.ini.