Incorrect Access Control in TOTOLINK T6 Router

Executive Summary

This vulnerability is an incorrect access control issue in the getDdnsCfg function of TOTOLINK T6 firmware version 4.1.5cu.748_B20211015. It allows unauthenticated attackers to retrieve sensitive DDNS configuration details such as domain, username, and password by sending a specially crafted POST request to the endpoint /cgi-bin/cstecgi.cgi.

Useful 0 Not Useful 0

Detection Guidance

To detect this vulnerability, check if your TOTOLINK T6 device running firmware 4.1.5cu.748_B20211015 is accessible via the web interface. Send a crafted POST request to /cgi-bin/cstecgi.cgi and inspect the response for DDNS configuration details like domain, username, or password.

Useful 0 Not Useful 0

Impact Analysis

This vulnerability could allow attackers to gain access to your DDNS credentials, potentially enabling them to hijack your domain or redirect traffic. If you use this device for network services, attackers might intercept or manipulate your DNS traffic, leading to data breaches or unauthorized access to your network.

Useful 0 Not Useful 0

Mitigation Strategies

Immediately update the TOTOLINK T6 firmware to the latest version. If no update is available, restrict access to the device's web interface via network segmentation or firewall rules. Monitor network traffic for suspicious POST requests to /cgi-bin/cstecgi.cgi.

Useful 0 Not Useful 0