EUVD-2026-67899
GHSA-jqcx-8w8w-r45g
Severity by source
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Network-reachable unauthenticated endpoint; no complexity or interaction required; confidentiality impact only as credentials are disclosed but no write or availability effect.
Primary rating from Vendor (mitre).
CVSS VectorVendor: mitre
Lifecycle Timeline
5DescriptionCVE.org
Incorrect access control in the getWiFiEasyCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to obtain sensitive information such as SSIDs and Wi-Fi keys, via sending a crafted POST request to /cgi-bin/cstecgi.cgi.
AnalysisAI
Unauthenticated information disclosure in TOTOLINK T6 firmware 4.1.5cu.748_B20211015 exposes Wi-Fi credentials - including SSIDs and plaintext Wi-Fi keys - to any attacker on the network or internet who can reach the device's web interface. The getWiFiEasyCfg function in the CGI handler accepts POST requests without enforcing authentication, classifying this as CWE-284 improper access control rather than a logic bypass. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | No authentication is required against the TOTOLINK T6's web interface - the getWiFiEasyCfg endpoint accepts unauthenticated POST requests by design flaw. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 3.1 base score of 7.5 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) correctly reflects the low-friction, unauthenticated, network-accessible nature of this flaw. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Check the TOTOLINK firmware download page (https://www.totolink.net/home/menu/detail/menu_listtpl/download/id/190/ids/36.html) for a patched firmware release newer than 4.1.5cu.748_B20211015; no specific patched version is confirmed in available data, so a vendor-released fix cannot be cited with certainty. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, conduct a network inventory to identify all TOTOLINK T6 routers and immediately restrict access to the device's web interface using firewall rules-block all external access and limit internal access to authorized administrators via IP-based ACLs. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Same weakness CWE-284 – Improper Access Control
View allSame technique Authentication Bypass
View allShare
External POC / Exploit Code
Leaving vuln.today