CVE-2025-7952 - TOTOLINK T6 MQTT Packet wireless.so ckeckKeepAlive command injection

Back Back to CVE browser

MEDIUM

TOTOLINK T6 MQTT Packet wireless.so ckeckKeepAlive command injection

Published Jul 22, 2025

5.3

MEDIUM

CVSS 4.0

EPSS 20.95%

Description

A vulnerability classified as critical was found in TOTOLINK T6 4.1.5cu.748. This vulnerability affects the function ckeckKeepAlive of the file wireless.so of the component MQTT Packet Handler. The manipulation leads to command injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

Affected products

Vendor TOTOLINK Product T6 Default
n/a
- Version
  4.1.5cu.748
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

TOTOLINK

n/a

Version	Status	Constraints
4.1.5cu.748	affected	-

Remediation

No remediation recorded yet.

Weaknesses (2)

CWE-74

CWE-77

References (7)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-22280
Advisory
https://github.com/ElvisBlue/Public/blob/main/Vuln/7.md
relatedExploitThird Party Advisory
https://github.com/ElvisBlue/Public/blob/main/Vuln/7.md#poc
exploitThird Party Advisory
https://vuldb.com/?ctiid.317098
signaturepermissions-requiredPermissions Required
https://vuldb.com/?id.317098
vdb-entrytechnical-descriptionThird Party AdvisoryVDB Entry
https://vuldb.com/?submit.619319
third-party-advisoryThird Party AdvisoryVDB Entry
https://www.totolink.net/
product

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-22280		Advisory
https://github.com/ElvisBlue/Public/blob/main/Vuln/7.md		relatedExploitThird Party Advisory
https://github.com/ElvisBlue/Public/blob/main/Vuln/7.md#poc		exploitThird Party Advisory
https://vuldb.com/?ctiid.317098		signaturepermissions-requiredPermissions Required
https://vuldb.com/?id.317098		vdb-entrytechnical-descriptionThird Party AdvisoryVDB Entry
https://vuldb.com/?submit.619319		third-party-advisoryThird Party AdvisoryVDB Entry
https://www.totolink.net/		product