CyberRota Analysis
AI-GeneratedTOTOLINK T6 version 4.1.5cu.748_B20211015 has an incorrect access control vulnerability in the getIptvCfg function, allowing unauthenticated attackers to retrieve sensitive IPTV and IGMP configuration data by sending a specially crafted POST request to the CGI endpoint. Organizations using this router model should prioritize patching this vulnerability to prevent potential information disclosure and unauthorized access to network configurations.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Incorrect access control in the getIptvCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to obtain IPTV and IGMP configuration information via sending a crafted POST request to /cgi-bin/cstecgi.cgi.