CVE-2025-13184

CVE-2025-13184 affects TOTOLINK X5000R (AX1800) with factory/reset version V9.1.0u.6369_B20230113. The vulnerability is unauthenticated Telnet enablement via /cgi-bin/cstecgi.cgi (auth bypass), allowing unauthenticated root access with a blank password and potential arbitrary command execution. E...

The vulnerability of the setScheduleCfg function in the microprogramming software for TOTOLINK X5000R allows a hacker to execute arbitrary commands.

The vulnerability of the setScheduleCfg function in TOTOLINK X5000R router microprogramming software exists due to the lack of measures to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands by processing the recHour parameter...