Incorrect Access Control in TOTOLINK T6 Allows Wi-Fi Scheduling Rule Disclosure

Executive Summary

This vulnerability is an incorrect access control issue in the TOTOLINK T6 router firmware version 4.1.5cu.748_B20211015. It exists in the getApWiFiSchCfg function, which improperly restricts access to AP-specific Wi-Fi scheduling rules. An unauthenticated attacker can exploit this by sending a specially crafted POST request to /cgi-bin/cstecgi.cgi to retrieve these rules without proper authorization.

Useful 0 Not Useful 0

Detection Guidance

To detect this vulnerability, monitor network traffic for POST requests to /cgi-bin/cstecgi.cgi with parameters targeting the getApWiFiSchCfg function. Check for unauthenticated access attempts to Wi-Fi scheduling rules.

Useful 0 Not Useful 0

Impact Analysis

This vulnerability allows attackers to obtain sensitive Wi-Fi scheduling information without authentication. This could enable further attacks such as network disruption, unauthorized access to the network during specific times, or gathering intelligence about network usage patterns. Users of affected TOTOLINK T6 devices should update firmware immediately.

Useful 0 Not Useful 0

Mitigation Strategies

Immediately update the TOTOLINK T6 firmware to the latest version. Restrict access to /cgi-bin/cstecgi.cgi via network firewall rules. Disable unnecessary services and monitor for suspicious POST requests.

Useful 0 Not Useful 0