CVE-2025-25604

Totolink X5000R with firmware 9.1.0u.6369_B20230113 is affected by a command-injection vulnerability in the vif_disable function of mtkwifi.lua. The issue, observable as CVE-2025-25604, comes from the vif_disable code path and could impact confidentiality and integrity (per CVSS 3.1: Confidential...