CyberRota Analysis
AI-GeneratedTOTOLINK T6 version 4.1.5cu.748_B20211015 has a vulnerability in the getWiFiEasyGuestCfg function that permits unauthenticated attackers to access sensitive guest Wi-Fi configuration details, including credentials, by sending a specially crafted POST request to the CGI endpoint. This flaw poses a significant risk to network security, as it could enable unauthorized access to the guest Wi-Fi network. Organizations using this router model should prioritize patching or mitigating this vulnerability to protect their network integrity.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Incorrect access control in the getWiFiEasyGuestCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to obtain simplified guest Wi-Fi configuration, including guest credentials, via sending a crafted POST request to /cgi-bin/cstecgi.cgi.