CVE-2025-25604

The Totolink X5000R router, specifically version V9.1.0u.6369_B20230113 , is susceptible to a command injection vulnerability. The root cause is located in the vif_disable function within the mtkwifi.lua component. This vulnerability allows an attacker to execute arbitrary commands on the device....