CVE-2025-52905

CVE-2025-52905 affects the TOTOLINK X6000R router. The vulnerability is described as an improper input validation issue that can enable flooding attacks, with impact noted as high availability impact . Affected versions are listed as through V9.4.0cu.1360_B20241207. The root cause is insufficient...

CVE-2025-52905 TOTOLINK X6000R Argument Injection Vulnerability

Improper Input Validation vulnerability in TOTOLINK X6000R allows Flooding.This issue affects X6000R: through V9.4.0cu.1360B20241207...

CVE-2025-52905 TOTOLINK X6000R Argument Injection Vulnerability

Improper Input Validation vulnerability in TOTOLINK X6000R allows Flooding.This issue affects X6000R: through V9.4.0cu.1360B20241207...

PT-2025-39196

Name of the Vulnerable Software and Affected Versions TOTOLINK X6000R versions through V9.4.0cu.1360 B20241207 Description An improper input validation issue exists in TOTOLINK X6000R, potentially allowing for flooding attacks. The issue affects the device due to insufficient validation of input...

CVE-2025-52905: Improper Input Validation

Improper Input Validation vulnerability in TOTOLINK X6000R allows Flooding.This issue affects X6000R: through V9.4.0cu.1360B20241207...

TOTOLINK X6000R security vulnerabilities

TOTOLINK X6000R is a wireless router supporting Wi-Fi 6 technology from China's Gion Electronics TOTOLINK, focusing on high concurrent connections and dual-band transmission capabilities. The TOTOLINK X6000R suffers from an improper input validation vulnerability, which can be exploited by...

TOTOLINK EX1200T Main Function Command Execution

The vulnerability of the main function in TOTOLINK EX1200T microcontroller-based routers lies in the lack of measures taken to neutralize the special elements used in the operating system commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

TOTOLINK X6000R Sub 410118 Arbitrary Command Execution

The vulnerability of the sub410118 function in the microprogrammed operating system of TOTOLINK X6000R relates to the lack of measures taken to neutralize special elements used in the operating system commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

TOTOLINK A3300R Router Command Execution

The vulnerability of the setDmzCfg function in TOTOLINK A3300R router microprogramming software is related to the lack of measures taken to neutralize special elements used in the operating system’s commands when processing the ip parameter. Exploiting this vulnerability allows a remote attacker ...

TOTOLINK EX200 ExportSettings.sh Script Unauthorized Access

The vulnerability of the ExportSettings.sh /cgi-bin/ExportSettings.sh script of the TOTOLINK EX200 router software relates to bypassing authentication using a user-controlled key. Exploiting this vulnerability allows an attacker to circumvent security restrictions and gain unauthorized access to...

TOTOLINK X6000R sub_417D74 function command injection vulnerability

TOTOLINK X6000R is a wireless router supporting Wi-Fi 6 technology from China's Gion Electronics TOTOLINK, focusing on high concurrent connections and dual-band transmission capabilities. The TOTOLINK X6000R suffers from a command injection vulnerability that stems from the failure to properly...

CVE-2025-52053

TOTOLINK X6000R V9.4.0cu.1360B20241207 was found to contain a command injection vulnerability in the sub417D74 function via the filename parameter. This vulnerability allows unauthenticated attackers to execute arbitrary commands via a crafted request...

TotalLink A3002R Router Web Server DoS

The vulnerability of the built-in web server boa /boafrm/formMapDelDevice of the Totolink A3002R router’s microprogramming software is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service interruptions remotely...

Totolink N600R SetWiFiWpsConfig Command Execution

The vulnerability of the setWiFiWpsConfig function in the Totolink N600R router’s microprogramming software is related to the lack of measures taken to neutralize special elements during the processing of the pin parameter. Exploiting this vulnerability allows a remote attacker to execute arbitra...

Totolink A3002R Router Arbitrary Command Execution

The vulnerability of the bupload.html component in the Totolink A3002R router microprogramming software is related to the lack of measures taken to clean data at the control level. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

Totolink A3002R eval XSS

The vulnerability of the eval function in Totolink A3002R router microprogramming software relates to the failure to eliminate instructions from the dynamically executed code. Exploiting this vulnerability could allow a remote attacker to perform domain--site attacks...

TotalLink A3002R Router Web Server DoS

The vulnerability of the built-in web server boa /boafrm/formFilter of the Totolink A3002R router’s microprogramming software is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

TotalLink A3002R Router Web Server DoS

The vulnerability of the built-in web server boa /boafrm/formPortFw of the Totolink A3002R router’s microprogramming software is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service interruptions remotely...

EUVD-2025-29199

TOTOLINK X6000R V9.4.0cu.1360B20241207 was found to contain a command injection vulnerability in the sub417D74 function via the filename parameter. This vulnerability allows unauthenticated attackers to execute arbitrary commands via a crafted request...

CVE-2025-52053

TOTOLINK X6000R V9.4.0cu.1360B20241207 was found to contain a command injection vulnerability in the sub417D74 function via the filename parameter. This vulnerability allows unauthenticated attackers to execute arbitrary commands via a crafted request...