CVE-2025-52053

TOTOLINK X6000R V9.4.0cu.1360B20241207 was found to contain a command injection vulnerability in the sub417D74 function via the filename parameter. This vulnerability allows unauthenticated attackers to execute arbitrary commands via a crafted request...

TOTOLINK Wi-Fi 6 Router Unauthorized Access

The vulnerability of TOTOLINK Wi-Fi 6 router microprogramming software is related to the use of strictly encrypted login credentials. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to the device with root privileges...

CVE-2025-52053

TOTOLINK X6000R V9.4.0cu.1360B20241207 was found to contain a command injection vulnerability in the sub417D74 function via the filename parameter. This vulnerability allows unauthenticated attackers to execute arbitrary commands via a crafted request...

CVE-2025-52053

TOTOLINK X6000R V9.4.0cu.1360B20241207 was found to contain a command injection vulnerability in the sub417D74 function via the filename parameter. This vulnerability allows unauthenticated attackers to execute arbitrary commands via a crafted request...

CVE-2025-52053

The TOTOLINK X6000R wireless router (specifically version V9.4.0cu.1360_B20241207 ) is vulnerable to a command injection vulnerability in the sub_417D74 function. The flaw arises because the software fails to properly filter command special characters or commands within the file_name parameter. A...

CVE-2025-52053: Improper Neutralization of Special Elements used in a Command

TOTOLINK X6000R V9.4.0cu.1360B20241207 was found to contain a command injection vulnerability in the sub417D74 function via the filename parameter. This vulnerability allows unauthenticated attackers to execute arbitrary commands via a crafted request...

CVE-2025-57579

An issue in TOTOLINK Wi-Fi 6 Router Series Device X2000R-Gh-V2.0.0 allows a remote attacker to execute arbitrary code via the default password...

CVE-2025-57579

An issue in TOTOLINK Wi-Fi 6 Router Series Device X2000R-Gh-V2.0.0 allows a remote attacker to execute arbitrary code via the default password...

CVE-2025-57579

An issue in TOTOLINK Wi-Fi 6 Router Series Device X2000R-Gh-V2.0.0 allows a remote attacker to execute arbitrary code via the default password...

CVE-2025-57579: Use of Hard-coded Credentials

An issue in TOTOLINK Wi-Fi 6 Router Series Device X2000R-Gh-V2.0.0 allows a remote attacker to execute arbitrary code via the default password...

formSysTel function TOTOLINK N350R DoS

The vulnerability of the formSysTel function in the microprogramming software for TOTOLINK N350R routers is related to the presence of undocumented configuration commands. Exploiting this vulnerability can allow a malicious actor to bypass existing security restrictions remotely...

CVE-2025-57579

An issue in TOTOLINK Wi-Fi 6 Router Series Device X2000R-Gh-V2.0.0 allows a remote attacker to execute arbitrary code via the default password...

TOTOLINK Wi-Fi 6 Router Series security vulnerabilities

TOTOLINK Wi-Fi 6 Router Series is a series of wireless routers from China's Gion Electronics TOTOLINK. A security vulnerability exists in the TOTOLINK Wi-Fi 6 Router Series X2000R-Gh-V2.0.0 version, which stems from an improperly set default password and could lead to the remote execution of...

CVE-2025-57579

An issue in TOTOLINK Wi-Fi 6 Router Series Device X2000R-Gh-V2.0.0 allows a remote attacker to execute arbitrary code via the default password...

CVE-2025-57579

The TOTOLINK Wi-Fi 6 Router Series Device X2000R-Gh-V2.0.0 is susceptible to a vulnerability where a remote attacker can execute arbitrary code. The root cause is the use of improperly set default passwords (specifically involving rigidly encrypted login credentials). Exploitation of this flaw co...

TOTOLINK N350R Form SysCmd Command Execution

The vulnerability of the /boafrm/formSysCmd component of the TOTOLINK N350R router’s microprogramming system is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands remotely...

Totolink N600R ub_4159F8() Command Execution

The vulnerability of the ub4159F8 function /webcste/cgi-bin/cstecgi.cgi of the Totolink N600R router’s microprogramming software is related to the lack of measures taken to neutralize special elements. Exploiting this vulnerability can allow a remote attacker to execute arbitrary commands...

TOTOLINK A702R Router DoS

The vulnerability of the sub4162DC function /boafrm/formFilter of the TOTOLINK A702R router’s software lies in the issue of the operation going beyond the buffer in memory when processing the ip6addr parameter. Exploiting this vulnerability allows a malicious actor to cause service failure by...

TOTOLINK X5000R Sub 410C34 Arbitrary Command Execution

The vulnerability of the sub410C34 function /cgi-bin/cstecgi.cgi of the TOTOLINK X5000R router’s microprogramming system is related to the lack of measures taken to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

TOTOLINK X5000R Command Injection Vulnerability

TOTOLINK X5000R is a wireless router supporting Wi-Fi 6 technology with full coverage mesh system and dual-band transmission for home and business network environments. The TOTOLINK X5000R suffers from a command injection vulnerability that stems from the parameter pid in the file...