EUVD-2026-68008
GHSA-phpc-vv2j-r99m
Severity by source
AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Adjacent-network vector matches router LAN exposure; no auth required; only Telnet status disclosed so C:L, no integrity or availability impact.
Primary rating from Vendor (mitre).
CVSS VectorVendor: mitre
Lifecycle Timeline
4DescriptionCVE.org
Incorrect access control in the getTelnetCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to obtain Telnet service enablement status information via sending a crafted POST request to /cgi-bin/cstecgi.cgi.
AnalysisAI
Unauthenticated information disclosure in TOTOLINK T6 firmware 4.1.5cu.748_B20211015 exposes Telnet service enablement status to any attacker on the adjacent network segment. The getTelnetCfg function in the CGI interface fails to enforce access control, allowing an unauthenticated POST request to /cgi-bin/cstecgi.cgi to reveal whether the Telnet daemon is active - a reconnaissance-grade leak rather than a full compromise. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Attacker must be on the same Layer-2 or adjacent network segment as the TOTOLINK T6 router (AV:A) - internet-based remote exploitation is not possible without prior network access. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | Real-world risk is low across all available signals. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | No patched firmware version is confirmed from available data - the referenced TOTOLINK download page may contain updated firmware, but no specific fixed version is identified in the advisory materials. … Detailed patch versions, workarounds, and compensating controls in full report. |
Threat intelligence, references, and detailed analysis are available after sign-in.
Same weakness CWE-284 – Improper Access Control
View allSame technique Authentication Bypass
View allShare
External POC / Exploit Code
Leaving vuln.today