CVE-2025-13184

The TOTOLINK X5000R router is vulnerable to an authentication bypass in the cstecgi.cgi component. This flaw allows for the unauthenticated enablement of Telnet, which can lead to an unauthenticated root login using a blank password on version V9.1.0u.6369_B20230113 . This sequence can result in ...

TOTOLINK X5000R SetScheduleCfg Command Execution

The vulnerability of the setScheduleCfg function in TOTOLINK X5000R router microprogramming software exists due to the lack of measures to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands by processing the recHour parameter...