Incorrect Access Control in TOTOLINK T6 Firmware

Executive Summary

This vulnerability is an incorrect access control issue in the TOTOLINK T6 router firmware version 4.1.5cu.748_B20211015. It allows unauthenticated attackers to retrieve sensitive WPS configuration details, including the current WPS PIN, by sending a specially crafted POST request to the /cgi-bin/cstecgi.cgi endpoint.

Useful 0 Not Useful 0

Detection Guidance

To detect this vulnerability, check if your TOTOLINK T6 device running firmware 4.1.5cu.748_B20211015 is accessible via network requests to /cgi-bin/cstecgi.cgi. Send a crafted POST request to this endpoint and inspect the response for WPS configuration details like the current PIN.

Useful 0 Not Useful 0

Impact Analysis

An attacker could exploit this to gain unauthorized access to your Wi-Fi network by obtaining the WPS PIN. This could lead to network compromise, data theft, or unauthorized use of your internet connection. It may also allow attackers to monitor network traffic or launch further attacks against devices on your network.

Useful 0 Not Useful 0

Mitigation Strategies

Immediately update the TOTOLINK T6 firmware to the latest version if an update is available. If no update exists, restrict access to the /cgi-bin/cstecgi.cgi endpoint via firewall rules or network segmentation until a patch is released.

Useful 0 Not Useful 0