CVE-2025-52053

TOTOLINK X6000R V9.4.0cu.1360B20241207 was found to contain a command injection vulnerability in the sub417D74 function via the filename parameter. This vulnerability allows unauthenticated attackers to execute arbitrary commands via a crafted request...

CVE-2025-52053

The CVE-2025-52053 entry concerns TOTOLINK X6000R firmware (version 9.4.0cu.1360_B20241207). Several connected sources confirm a command injection in the sub_417D74 function triggered by the file_name parameter, enabling unauthenticated arbitrary command execution. This is rooted in insufficient ...