Incorrect Access Control in TOTOLINK T6 Firmware

Executive Summary

This vulnerability is an incorrect access control issue in the TOTOLINK T6 router firmware version 4.1.5cu.748_B20211015. It allows unauthenticated attackers to retrieve Wi-Fi client MAC-to-IP address mappings by sending a specially crafted POST request to the /cgi-bin/cstecgi.cgi endpoint.

Useful 0 Not Useful 0

Detection Guidance

To detect this vulnerability, monitor network traffic for POST requests to /cgi-bin/cstecgi.cgi with parameters targeting the getWiFiIpMacTable function. Check for unauthenticated access attempts to Wi-Fi client MAC-to-IP mappings.

Useful 0 Not Useful 0

Impact Analysis

An attacker could exploit this to map devices connected to the Wi-Fi network, potentially revealing sensitive information about network usage or enabling further attacks like man-in-the-middle or targeted exploits against specific devices.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability allows unauthenticated attackers to obtain Wi-Fi client MAC-to-IP mappings, which could expose sensitive network information. Such data exposure may violate privacy requirements under GDPR and HIPAA by compromising personally identifiable information or protected health information.

Useful 0 Not Useful 0

Mitigation Strategies

Immediately update the TOTOLINK T6 firmware to the latest version. Disable unnecessary services or restrict access to the vulnerable endpoint via network segmentation or firewall rules until a patch is applied.

Useful 0 Not Useful 0