Incorrect Access Control in TOTOLINK T6 Firmware

Executive Summary

This vulnerability is an incorrect access control issue in the meshInfoKick function of TOTOLINK T6 firmware version 4.1.5cu.748_B20211015. It allows unauthenticated attackers to manipulate mesh information by sending a crafted MQTT message to the cs_broker component, enabling them to kick or clean stale mesh data and force regeneration of mesh metadata.

Useful 0 Not Useful 0

Detection Guidance

Detecting this vulnerability requires monitoring for unauthorized MQTT messages targeting the cs_broker component. Check network traffic for unexpected MQTT packets sent to the device's IP address. Inspect logs for meshInfoKick function calls or mesh metadata regeneration events without prior authentication.

Useful 0 Not Useful 0

Impact Analysis

An attacker could exploit this to disrupt mesh network operations, causing instability or incorrect routing of network traffic. This may lead to degraded network performance or loss of connectivity for devices relying on the mesh network.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability allows unauthenticated attackers to manipulate mesh information via crafted MQTT messages, potentially disrupting network integrity. Such unauthorized access could lead to data breaches or unauthorized data exposure, which may violate GDPR's data protection requirements or HIPAA's security rules for protected health information.

Useful 0 Not Useful 0

Mitigation Strategies

Immediately update the TOTOLINK T6 firmware to the latest version if available. Block unauthorized MQTT traffic to the cs_broker component at the network firewall level. Disable mesh functionality if not required. Monitor device logs for suspicious activity.

Useful 0 Not Useful 0