TOTOLINK X6000R Subroutine Arbitrary Command Execution

The vulnerability of sub4184C0 in the microprogramming software of TOTOLINK X6000R routers lies in the lack of measures taken to clean data at the control level. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands using a specially created request...

CVE-2025-52284: Improper Neutralization of Special Elements used in a Command

Totolink X6000R V9.4.0cu.1360B20241207 was found to contain a command injection vulnerability in the sub4184C0 function via the tz parameter. This vulnerability allows unauthenticated attackers to execute arbitrary commands via a crafted request...