CVE-2023-48811

In TOTOLINK X6000R V9.4.0cu.852B20230719, the shttpd file, sub4119A0 function obtains fields from the front-end through Uci Set The Str function that when passed to the CsteSystem function creates a command execution vulnerability...

CVE-2023-46979

TOTOLINK X6000R V9.4.0cu.852B20230719 was discovered to contain a command injection vulnerability via the enable parameter in the setLedCfg function...

CVE-2023-46420

TOTOLINK X6000R v9.4.0cu.652B20230116 was discovered to contain a remote command execution RCE vulnerability via the sub41590C function...

CVE-2023-46485

An issue in TOTOlink X6000R V9.4.0cu.852B20230719 allows a remote attacker to execute arbitrary code via the setTracerouteCfg function of the stecgi.cgi component...

CVE-2023-46422

TOTOLINK X6000R v9.4.0cu.652B20230116 was discovered to contain a remote command execution RCE vulnerability via the sub411994 function...

CVE-2023-46421

TOTOLINK X6000R v9.4.0cu.652B20230116 was discovered to contain a remote command execution RCE vulnerability via the sub411D00 function...

CVE-2023-46418

TOTOLINK X6000R v9.4.0cu.652B20230116 was discovered to contain a remote command execution RCE vulnerability via the sub412688 function...

CVE-2023-46408

TOTOLINK X6000R v9.4.0cu.652B20230116 was discovered to contain a command execution vulnerability via the sub The 41DD80 function...

CVE-2023-46417

TOTOLINK X6000R v9.4.0cu.652B20230116 was discovered to contain a remote command execution RCE vulnerability via the sub415498 function...

CVE-2023-46414

TOTOLINK X6000R v9.4.0cu.652B20230116 was discovered to contain a remote command execution RCE vulnerability via the sub 41D494 function...

CVE-2023-46484

An issue in TOTOlink X6000R V9.4.0cu.852B20230719 allows a remote attacker to execute arbitrary code via the setLedCfg function...

CVE-2023-46419

TOTOLINK X6000R v9.4.0cu.652B20230116 was discovered to contain a remote command execution RCE vulnerability via the sub415730 function...

CVE-2023-46415

TOTOLINK X6000R v9.4.0cu.652B20230116 was discovered to contain a remote command execution RCE vulnerability via the sub41E588 function...

CVE-2023-46409

TOTOLINK X6000R v9.4.0cu.652B20230116 was discovered to contain a command execution vulnerability via the sub 41CC04 function...

The vulnerability of the Wi-Fi Filtering Rule Handler component in the wireless dual-band router TOTOLink X6000R allows a hacker to execute arbitrary commands or cause service interruptions.

The vulnerability of the Wi-Fi Filtering Rule Handler component in the wireless dual-band router TOTOLink X6000R lies in the copying of buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this vulnerability could allow an attacker to execute arbitrary...

TOTOLINK X6000R Buffer Overflow Vulnerability

TOTOLINK X6000R is a wireless router from China's Gion Electronics TOTOLINK. The TOTOLINK X6000R suffers from a buffer overflow vulnerability that originates from a boundary error when the application processes untrusted input. No detailed vulnerability details are available at this time...

VulnCheck KEV: CVE-2024-2353

A vulnerability, which was classified as critical, has been found in Totolink X6000R 9.4.0cu.85220230719. This issue affects the function setDiagnosisCfg of the file /cgi-bin/cstecgi.cgi of the component shttpd. The manipulation of the argument ip leads to os command injection. The attack may be...

CVE-2025-25524

Buffer overflow vulnerability in TOTOLink X6000R routers V9.4.0cu.652B20230116 due to the lack of length verification, which is related to the addition of Wi-Fi filtering rules. Attackers who successfully exploit this vulnerability can cause the remote target device to crash or execute arbitrary...

PT-2025-6379 · Totolink · Totolink X6000R

Name of the Vulnerable Software and Affected Versions: TOTOLink X6000R version V9.4.0cu.652 B20230116 Description: The issue is related to a buffer overflow vulnerability due to the lack of length verification when adding Wi-Fi filtering rules. This can cause the remote target device to crash or...

CVE-2025-25524

CVE-2025-25524 affects TOTOLink X6000R routers (V9.4.0cu.652_B20230116). Root cause: buffer overflow from missing length verification when adding Wi‑Fi filtering rules. Impact: remote device may crash or execute arbitrary commands. Exploitation details in sources are not provided; attack vector i...