CVSS: 6.5EPSS: 0%CPEs: 2EXPL: 1CVE-2023-7223 – Totolink T6 cstecgi.cgi access control
https://notcve.org/view.php?id=CVE-2023-7223
A vulnerability classified as problematic has been found in Totolink T6 4.1.9cu.5241_B20210923. This affects an unknown part of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument topicurl with the input showSyslog leads to improper access controls. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. • https://drive.google.com/file/d/1puSOo5XrzMrctw7EtrE7DnfssOOuhRTS/view?usp=sharing https://vuldb.com/?ctiid.249867 https://vuldb.com/?id.249867 • CWE-284: Improper Access Control •
CVSS: 10.0EPSS: 0%CPEs: 2EXPL: 1CVE-2023-7221 – Totolink T6 HTTP POST Request main buffer overflow
https://notcve.org/view.php?id=CVE-2023-7221
A vulnerability was found in Totolink T6 4.1.9cu.5241_B20210923. It has been classified as critical. This affects the function main of the file /cgi-bin/cstecgi.cgi?action=login of the component HTTP POST Request Handler. The manipulation of the argument v41 leads to buffer overflow. • https://github.com/jylsec/vuldb/blob/main/TOTOLINK/T6/1/README.md https://vuldb.com/?ctiid.249855 https://vuldb.com/?id.249855 • CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') •