EUVD-2026-68006
GHSA-6hf3-gh9x-pxf6
Severity by source
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Cloud firmware check status is low-sensitivity operational data; C:H overstates impact relative to credential or full-configuration disclosure.
Primary rating from Vendor (mitre).
CVSS VectorVendor: mitre
Lifecycle Timeline
5DescriptionCVE.org
Incorrect access control in the getCloudSrvCheckStatus function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to obtain cloud firmware check status information via sending a crafted POST request to /cgi-bin/cstecgi.cgi.
AnalysisAI
Unauthenticated network access to the getCloudSrvCheckStatus function on TOTOLINK T6 firmware 4.1.5cu.748_B20211015 exposes cloud firmware check status information to any remote attacker who sends a crafted POST to /cgi-bin/cstecgi.cgi. The CWE-284 improper access control flaw requires no credentials or session token, though the leaked data - firmware update check status - is of modest sensitivity compared to credentials or full configuration disclosure. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | No authentication is required - the getCloudSrvCheckStatus function in /cgi-bin/cstecgi.cgi on TOTOLINK T6 firmware 4.1.5cu.748_B20211015 performs no session or credential validation before processing and responding to requests. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 3.1 vector AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N scores 7.5, but the C:H rating overstates the sensitivity of the exposed data: cloud firmware check status reveals whether the device is checking for updates but does not expose credentials, configuration keys, or actionable network topology. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | No specific patched firmware version is identified in available data - patch availability must be confirmed directly at the TOTOLINK firmware portal (https://www.totolink.net/home/menu/detail/menu_listtpl/download/id/190/ids/36.html) and the vendor site (https://www.totolink.net/). … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, implement firewall rules to restrict network access to the TOTOLINK T6 management interface (TCP ports 80/443) to authorized administrative networks only and disable WAN-facing management if enabled. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Same weakness CWE-284 – Improper Access Control
View allSame technique Authentication Bypass
View allShare
External POC / Exploit Code
Leaving vuln.today