The vulnerability arises from an incorrect access control check in the getApWiFiSchCfg function of the TOTOLINK T6 router firmware version 4.1.5cu.748_B20211015. Attackers who can reach the device on the network can craft a POST request to /cgi-bin/cstecgi.cgi and retrieve the Wi‑Fi scheduling configuration specific to the access point. This disclosure allows an unauthenticated user to learn when the router’s wireless interfaces are enabled or disabled.

Only the TOTOLINK T6 router running firmware 4.1.5cu.748_B20211015 is known to be affected. No other product or version information is provided in the advisory, so the impact appears to be limited to this single build.

The exploitation path requires no authentication; an attacker merely needs the ability to send HTTP POST requests to the vulnerable CGI endpoint from a host that can reach the router. The scenario is straightforward, therefore any device that can reach the router—whether inside a local network or from an external location where the router is exposed—is susceptible. No EPSS score is provided, and the KEV flag indicates the vulnerability is not listed in the CISA KEV catalog. Because of the lack of authentication checks the risk is elevated for environments where the router’s web interface is reachable by untrusted hosts, but the impact remains confined to the disclosure of scheduling information.