Incorrect Access Control in TOTOLINK T6 Router

Executive Summary

This vulnerability is an incorrect access control issue in the TOTOLINK T6 router firmware version 4.1.5cu.748_B20211015. The getWiFiGuestCfg function fails to properly restrict access, allowing unauthenticated attackers to retrieve guest Wi-Fi configuration details by sending a specially crafted POST request to the /cgi-bin/cstecgi.cgi endpoint.

Useful 0 Not Useful 0

Detection Guidance

To detect this vulnerability, check if your TOTOLINK T6 device running firmware 4.1.5cu.748_B20211015 is accessible via the web interface. Send a crafted POST request to /cgi-bin/cstecgi.cgi and inspect the response for guest Wi-Fi configuration details. Use tools like curl or Burp Suite to automate this test.

Useful 0 Not Useful 0

Impact Analysis

An attacker could exploit this to obtain sensitive Wi-Fi network details, including guest network credentials. This may enable further attacks like unauthorized network access, man-in-the-middle attacks, or data interception on the guest network.

Useful 0 Not Useful 0

Mitigation Strategies

Immediately update the TOTOLINK T6 firmware to the latest version. If no update is available, restrict access to the device's web interface via network segmentation or firewall rules. Disable guest Wi-Fi access temporarily until the issue is resolved.

Useful 0 Not Useful 0