TOTOLINK T10

• CVE-2025-14964 Critical 9.8 TOTOLINK T10 cstecgi.cgi sprintf stack-based overflow 1.0%
• CVE-2025-9533 High 7.3 TOTOLINK T10 formLoginAuth.htm improper authentication 12.2%
• CVE-2025-6139 Low 3.9 TOTOLINK T10 shadow.sample hard-coded password 0.4%
• CVE-2025-6138 High 8.8 TOTOLINK T10 HTTP POST Request cstecgi.cgi setWizardCfg buffer overflow 1.0%
• CVE-2025-6137 High 8.8 TOTOLINK T10 HTTP POST Request cstecgi.cgi setWiFiScheduleCfg buffer overflow 1.0%
• CVE-2025-5905 High 8.8 TOTOLINK T10 POST Request cstecgi.cgi setWiFiRepeaterCfg buffer overflow 12.4%
• CVE-2025-5904 High 8.8 TOTOLINK T10 POST Request cstecgi.cgi setWiFiMeshName buffer overflow 12.1%
• CVE-2025-5903 High 8.8 TOTOLINK T10 POST Request cstecgi.cgi setWiFiAclRules buffer overflow 12.1%
• CVE-2025-5902 High 8.8 TOTOLINK T10 POST Request cstecgi.cgi setUpgradeFW buffer overflow 6.5%
• CVE-2025-5901 High 8.8 TOTOLINK T10 POST Request cstecgi.cgi UploadCustomModule buffer overflow 6.9%
• CVE-2025-4496 High 8.8 TOTOLINK T10/A3100R/A950RG/A800R/N600R/A3000RU/A810R cstecgi.cgi CloudACMunualUpdate buffer overflow 1.2%
• CVE-2024-9001 Medium 6.3 TOTOLINK T10 cstecgi.cgi setTracerouteCfg os command injection 3.3%