147 matches found
CVE-2023-29799
TOTOLINK X18 V9.1.0cu.2024B20220329 was discovered to contain a command injection vulnerability via the hostname parameter in the setOpModeCfg function...
CVE-2023-29801
TOTOLINK X18 V9.1.0cu.2024B20220329 was discovered to contain multiple command injection vulnerabilities via the rtLogEnabled and rtLogServer parameters in the setSyslogCfg function...
CVE-2025-29209
TOTOLINK X18 v9.1.0cu.2024B20220329 has an unauthorized arbitrary command execution in the enable parameter' of the sub41105C function of cstecgi .cgi...
TOTOLINK X18 Command Execution Vulnerability
The TOTOLINK X18 is a wireless router from TOTOLINK that provides a high-speed and stable wireless network connection. The TOTOLINK X18 suffers from a command execution vulnerability that originates in the enable parameter of the sub41105C function of the cstecgi.cgi file. An attacker can exploit...
CVE-2025-29209
TOTOLINK X18 v9.1.0cu.2024B20220329 has an unauthorized arbitrary command execution in the enable parameter' of the sub41105C function of cstecgi .cgi...
CVE-2025-29209
TOTOLINK X18 v9.1.0cu.2024B20220329 has an unauthorized arbitrary command execution in the enable parameter' of the sub41105C function of cstecgi .cgi...
CVE-2025-29209
TOTOLINK X18 v9.1.0cu.2024B20220329 has an unauthorized arbitrary command execution in the enable parameter' of the sub41105C function of cstecgi .cgi...
CVE-2025-29209
CVE-2025-29209 affects TOTOLINK X18 (version 9.1.0cu.2024_B20220329). The vulnerability is an unauthorized arbitrary command execution in the enable parameter of the sub_41105C function in cstecgi.cgi. Multiple sources corroborate the issue and describe it as a high-severity, network-based vulner...
CVE-2025-29209
TOTOLINK X18 v9.1.0cu.2024B20220329 has an unauthorized arbitrary command execution in the enable parameter' of the sub41105C function of cstecgi .cgi...
PT-2025-17305 · Totolink · Totolink X18
Name of the Vulnerable Software and Affected Versions: TOTOLINK X18 version 9.1.0cu.2024 B20220329 Description: The issue concerns an unauthorized arbitrary command execution in the enable parameter of the sub 41105C function of cstecgi.cgi. Recommendations: For TOTOLINK X18 version 9.1.0cu.2024...
TOTOLINK X18 安全漏洞
The TOTOLINK X18 is a wireless router from TOTOLINK that provides a high-speed and stable wireless network connection. The TOTOLINK X18 suffers from a command execution vulnerability that originates in the enable parameter of the sub41105C function of the cstecgi.cgi file. An attacker can exploit...
TOTOLINK X18 Code Execution Vulnerability
The TOTOLINK X18 is a gigabit router from China's Gion Electronics. A code execution vulnerability exists in the TOTOLINK X18. The vulnerability stems from sub410E54 in cstecgi.cgi and can be exploited by an attacker to execute arbitrary commands...
CVE-2025-29064
An issue in TOTOLINK x18 v.9.1.0cu.2024B20220329 allows a remote attacker to execute arbitrary code via the sub410E54 function of the cstecgi.cgi...
CVE-2025-29064
An issue in TOTOLINK x18 v.9.1.0cu.2024B20220329 allows a remote attacker to execute arbitrary code via the sub410E54 function of the cstecgi.cgi...
CVE-2025-29064
An issue in TOTOLINK x18 v.9.1.0cu.2024B20220329 allows a remote attacker to execute arbitrary code via the sub410E54 function of the cstecgi.cgi...
CVE-2025-29064
An issue in TOTOLINK x18 v.9.1.0cu.2024B20220329 allows a remote attacker to execute arbitrary code via the sub410E54 function of the cstecgi.cgi...
TOTOLINK X18 安全漏洞
The TOTOLINK X18 is a gigabit router from China's Gion Electronics. A code execution vulnerability exists in the TOTOLINK X18. The vulnerability stems from sub410E54 in cstecgi.cgi and can be exploited by an attacker to execute arbitrary commands...
CVE-2025-29064
The CVE-2025-29064 issue affects TOTOLINK X18, specifically version 9.1.0cu.2024_B20220329. A code execution vulnerability exists in the cstecgi.cgi component, via the sub_410E54 function, which could allow a remote attacker to run arbitrary code. The CVSS 3.1 base score is 9.8 (CRITICAL) with ne...
PT-2025-14802 · Totolink · Totolink X18
Name of the Vulnerable Software and Affected Versions: TOTOLINK x18 version 9.1.0cu.2024 B20220329 Description: The issue allows a remote attacker to execute arbitrary code via the sub 410E54 function of the cstecgi.cgi. Recommendations: For TOTOLINK x18 version 9.1.0cu.2024 B20220329, as a...