A critical access control flaw in TOTOLINK T6 routers enables unauthenticated attackers to perform unauthorized configuration resets and device reboots.

This vulnerability resides in the LoadDefSettings function, which fails to perform necessary authentication checks. An unauthenticated attacker can exploit this by sending a specifically crafted POST request to the /cgi-bin/cstecgi.cgi endpoint to compromise device integrity and availability.

The ability for an unauthenticated remote attacker to reset a network device to factory defaults poses a severe risk to business continuity. Successful exploitation results in complete loss of device configuration, leading to significant operational downtime, potential loss of secure connectivity, and a requirement for manual administrative intervention to restore service. With a CVSS score of 9.8, this vulnerability represents a critical threat to the availability and integrity of the affected networking infrastructure.

Immediate Action: Consult the vendor support portal at the provided reference link to determine if a firmware update is available for your specific hardware revision. If no update is available, disconnect the management interface from the public internet immediately.

Proactive Monitoring: Monitor network traffic for anomalous POST requests directed at the /cgi-bin/cstecgi.cgi endpoint of your TOTOLINK devices. Review device logs for unexpected configuration changes or unauthorized reboot events.

Compensating Controls: Restrict access to the router management interface to trusted internal IP addresses only. Implement a firewall rule to block all external access to the web management port of the device.

Public Exploit Available: Unknown.

Given the critical severity and the potential for total device compromise, administrators should treat this vulnerability with high urgency. Prioritize the isolation of affected devices from untrusted network segments until a formal firmware patch or vendor-approved mitigation is applied. Confirm the patch status through official TOTOLINK support channels and apply updates immediately upon release to restore the security posture of the affected equipment.