Incorrect Access Control in TOTOLINK T6 Firmware Allows Information Disclosure

Executive Summary

This vulnerability is an incorrect access control issue in the getWiFiEasyCfg function of TOTOLINK T6 firmware version 4.1.5cu.748_B20211015. It allows unauthenticated attackers to retrieve sensitive Wi-Fi information such as SSIDs and Wi-Fi keys by sending a specially crafted POST request to the vulnerable endpoint /cgi-bin/cstecgi.cgi.

Useful 0 Not Useful 0

Detection Guidance

To detect this vulnerability, check if your TOTOLINK T6 device is running firmware version 4.1.5cu.748_B20211015. Send a crafted POST request to /cgi-bin/cstecgi.cgi and inspect the response for SSIDs or Wi-Fi keys. Use network scanning tools to identify exposed devices.

Useful 0 Not Useful 0

Impact Analysis

An attacker could exploit this to gain unauthorized access to your Wi-Fi network, intercept network traffic, or launch further attacks against devices connected to the same network. This could lead to data theft, unauthorized system access, or compromise of connected devices.

Useful 0 Not Useful 0

Mitigation Strategies

Immediately update the TOTOLINK T6 firmware to a patched version. Disable remote access to the web interface if not required. Restrict network access to the device via firewall rules. Monitor network traffic for suspicious POST requests to /cgi-bin/cstecgi.cgi.

Useful 0 Not Useful 0