[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fpqVMR4igey1t7knkZzurrDStHr3c2bsT_caWSFeQEq0":3,"g5a-ex:totolink\u002Ft10_firmware@*":107,"g5a-family:totolink\u002Ft10_firmware":109},{"success":4,"data":5},true,{"product":6,"versions":28,"topVulnerabilitiesByEpss":34,"kevVulnerabilities":84,"seoMetadata":85,"meta":104},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":27},"totolink","t10_firmware",5,16,0,"2025-07-21",[14,18,20,22,25],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},"4.1.8cu.5207",10,false,{"version":19,"cve_count":11,"kev_count":11,"has_kev":17},"4.1.8cu.5207_b20210320",{"version":21,"cve_count":11,"kev_count":11,"has_kev":17},"4.1.8cu.5241_b20210927",{"version":23,"cve_count":24,"kev_count":11,"has_kev":17},"5.9",1,{"version":26,"cve_count":9,"kev_count":11,"has_kev":17},"v4.1.8cu.5207_b20210320","T10 Firmware by Totolink is a technology product with 5 tracked versions and 16 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[29,30,31,32,33],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},{"version":19,"cve_count":11,"kev_count":11,"has_kev":17},{"version":21,"cve_count":11,"kev_count":11,"has_kev":17},{"version":23,"cve_count":24,"kev_count":11,"has_kev":17},{"version":26,"cve_count":9,"kev_count":11,"has_kev":17},[35,43,47,50,55,59,67,74,78,81],{"cveId":36,"description":37,"publishedDate":38,"cvssScore":39,"cvssVersion":40,"severity":41,"isKev":17,"epssScore":42},"CVE-2025-5905","A vulnerability was found in TOTOLINK T10 4.1.8cu.5207. It has been rated as critical. Affected by this issue is the function setWiFiRepeaterCfg of the file \u002Fcgi-bin\u002Fcstecgi.cgi of the component POST Request Handler. The manipulation of the argument Password leads to buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.","2025-06-10",8.8,"v3.1","High",0.11547,{"cveId":44,"description":45,"publishedDate":38,"cvssScore":39,"cvssVersion":40,"severity":41,"isKev":17,"epssScore":46},"CVE-2025-5903","A vulnerability was found in TOTOLINK T10 4.1.8cu.5207. It has been classified as critical. Affected is the function setWiFiAclRules of the file \u002Fcgi-bin\u002Fcstecgi.cgi of the component POST Request Handler. The manipulation of the argument desc leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.",0.11275,{"cveId":48,"description":49,"publishedDate":38,"cvssScore":39,"cvssVersion":40,"severity":41,"isKev":17,"epssScore":46},"CVE-2025-5904","A vulnerability was found in TOTOLINK T10 4.1.8cu.5207. It has been declared as critical. Affected by this vulnerability is the function setWiFiMeshName of the file \u002Fcgi-bin\u002Fcstecgi.cgi of the component POST Request Handler. The manipulation of the argument device_name leads to buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.",{"cveId":51,"description":52,"publishedDate":53,"cvssScore":39,"cvssVersion":40,"severity":41,"isKev":17,"epssScore":54},"CVE-2025-5901","A vulnerability has been found in TOTOLINK T10 4.1.8cu.5207 and classified as critical. This vulnerability affects the function UploadCustomModule of the file \u002Fcgi-bin\u002Fcstecgi.cgi of the component POST Request Handler. The manipulation of the argument File leads to buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.","2025-06-09",0.06388,{"cveId":56,"description":57,"publishedDate":53,"cvssScore":39,"cvssVersion":40,"severity":41,"isKev":17,"epssScore":58},"CVE-2025-5902","A vulnerability was found in TOTOLINK T10 4.1.8cu.5207 and classified as critical. This issue affects the function setUpgradeFW of the file \u002Fcgi-bin\u002Fcstecgi.cgi of the component POST Request Handler. The manipulation of the argument slaveIpList leads to buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.",0.06076,{"cveId":60,"description":61,"publishedDate":62,"cvssScore":63,"cvssVersion":64,"severity":65,"isKev":17,"epssScore":66},"CVE-2024-9001","A vulnerability was found in TOTOLINK T10 4.1.8cu.5207. It has been declared as critical. This vulnerability affects the function setTracerouteCfg of the file \u002Fcgi-bin\u002Fcstecgi.cgi. The manipulation of the argument command leads to os command injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.","2024-09-19",5.3,"v4.0","Medium",0.03321,{"cveId":68,"description":69,"publishedDate":70,"cvssScore":71,"cvssVersion":40,"severity":72,"isKev":17,"epssScore":73},"CVE-2022-25132","A command injection vulnerability in the function meshSlaveDlfw of TOTOLINK Technology router T6 V3_Firmware T6_V3_V4.1.5cu.748_B20211015 allows attackers to execute arbitrary commands via a crafted MQTT packet.","2022-02-19",9.8,"Critical",0.02909,{"cveId":75,"description":76,"publishedDate":70,"cvssScore":71,"cvssVersion":40,"severity":72,"isKev":17,"epssScore":77},"CVE-2022-25130","A command injection vulnerability in the function updateWifiInfo of TOTOLINK Technology routers T6 V3_Firmware T6_V3_V4.1.5cu.748_B20211015 and T10 V2_Firmware V4.1.8cu.5207_B20210320 allows attackers to execute arbitrary commands via a crafted MQTT packet.",0.02198,{"cveId":79,"description":80,"publishedDate":70,"cvssScore":71,"cvssVersion":40,"severity":72,"isKev":17,"epssScore":77},"CVE-2022-25131","A command injection vulnerability in the function recvSlaveCloudCheckStatus of TOTOLINK Technology routers T6 V3_Firmware T6_V3_V4.1.5cu.748_B20211015 and T10 V2_Firmware V4.1.8cu.5207_B20210320 allows attackers to execute arbitrary commands via a crafted MQTT packet.",{"cveId":82,"description":83,"publishedDate":70,"cvssScore":71,"cvssVersion":40,"severity":72,"isKev":17,"epssScore":77},"CVE-2022-25136","A command injection vulnerability in the function meshSlaveUpdate of TOTOLINK Technology routers T6 V3_Firmware T6_V3_V4.1.5cu.748_B20211015 and T10 V2_Firmware V4.1.8cu.5207_B20210320 allows attackers to execute arbitrary commands via a crafted MQTT packet.",[],{"title":86,"metaDescription":87,"keywords":88,"structuredData":89},"T10 Firmware by Totolink - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for T10 Firmware by Totolink covering 5 versions with 16 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","T10 Firmware vulnerabilities, T10 Firmware security, T10 Firmware CVE, Totolink T10 Firmware, T10 Firmware threat intelligence, Totolink security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":90,"@type":91,"name":92,"description":87,"url":93,"manufacturer":94,"applicationCategory":98,"softwareVersion":99,"mainEntity":100},"https:\u002F\u002Fschema.org","SoftwareApplication","T10 Firmware","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Ftotolink\u002Ft10_firmware",{"@type":95,"name":96,"url":97},"Organization","Totolink","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Ftotolink","Security Software","5 versions tracked",{"@type":101,"name":102,"description":103,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","T10 Firmware Security Vulnerabilities","Security vulnerabilities affecting T10 Firmware by Totolink",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":105,"apiVersion":106},"2026-10-18T23:06:18.574Z","3.0",{"rows":108,"total":11,"capped":17,"failed":11},[],[]]