CVE-2025-7615

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

A vulnerability classified as critical was found in TOTOLINK T6 4.1.5cu.748. Affected by this vulnerability is the function clearPairCfg of the file /cgi-bin/cstecgi.cgi of the component HTTP POST Request Handler. The manipulation of the argument ip leads to command injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-74 CWE-77

Affected software

Vendor	Product	Versions
TOTOLINK	T6	4.1.5cu.748

References

https://github.com/ElvisBlue/Public/blob/main/Vuln/6.mdExploit, Third Party Advisory
https://github.com/ElvisBlue/Public/blob/main/Vuln/6.md#pocExploit
https://vuldb.com/?ctiid.316315Permissions Required, VDB Entry
https://vuldb.com/?id.316315Third Party Advisory, VDB Entry
https://vuldb.com/?submit.615369Third Party Advisory, VDB Entry
https://www.totolink.net/Product

Timeline

Published: Jul 14, 2025
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2025

CVE-2025-76167.5A vulnerability, which was classified as critical, has been found in gmg137 snap7-rs up to 1.142.1. Affected by this issue is the function p CVE-2025-76184.8A stored Cross-Site Scripting (XSS) vulnerability vulnerability was found in the File Explorer and Text Editor of ADM. An attacker could exp CVE-2025-76198.8BatchSignCS, a background Windows application developed by WellChoose, has an Arbitrary File Write vulnerability. If a user visits a malicio CVE-2025-76208.8The cross-browser document creation component produced by Digitware System Integration Corporation has a Remote Code Execution vulnerability CVE-2025-76225.7During an internal security assessment, a Server-Side Request Forgery (SSRF) vulnerability that allowed an authenticated attacker to access CVE-2025-76235.4Stack-based buffer overflow in the SMASH-CLP shell. An authenticated attacker with SSH access to the BMC can exploit a stack buffer overflow CVE-2025-76249.8An SQL injection vulnerability in the legacy (transparent) SMTP proxy of Sophos Firewall versions older than 21.0 MR2 (21.0.2) can lead to r CVE-2025-76254.3A vulnerability, which was classified as critical, was found in YiJiuSmile kkFileViewOfficeEdit up to 5fbc57c48e8fe6c1b91e0e7995e2d59615f37a CVE-2025-76267.5A vulnerability has been found in YiJiuSmile kkFileViewOfficeEdit up to 5fbc57c48e8fe6c1b91e0e7995e2d59615f37abd and classified as critical.CVE-2025-76279.8A vulnerability was found in YiJiuSmile kkFileViewOfficeEdit up to 5fbc57c48e8fe6c1b91e0e7995e2d59615f37abd and classified as critical. Affe CVE-2025-76288.1A vulnerability was found in YiJiuSmile kkFileViewOfficeEdit up to 5fbc57c48e8fe6c1b91e0e7995e2d59615f37abd. It has been classified as criti CVE-2025-76305.3Improper Restriction of Excessive Authentication Attempts, Improper Authentication vulnerability in Doruk Communication and Automation Indus