CyberRota Analysis
AI-GeneratedTOTOLINK T6 version 4.1.5cu.748_B20211015 is vulnerable due to incorrect access control in the getWiFiGuestCfg function, allowing unauthenticated attackers to retrieve sensitive guest Wi-Fi configuration data through a specially crafted POST request. Organizations using this router model should prioritize addressing this vulnerability to prevent unauthorized access to network configurations and potential exploitation. Immediate action is recommended for network administrators managing TOTOLINK devices to safeguard their environments.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Incorrect access control in the getWiFiGuestCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to obtain guest Wi-Fi configuration information via sending a crafted POST request to /cgi-bin/cstecgi.cgi.