CVE-2025-29064 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

An issue in TOTOLINK x18 v.9.1.0cu.2024_B20220329 allows a remote attacker to execute arbitrary code via the sub_410E54 function of the cstecgi.cgi.
Critical CVSS: 9.8

CVE-2025-29064

An issue in TOTOLINK x18 v.9.1.0cu.2024_B20220329 allows a remote attacker to execute arbitrary code via the sub_410E54 function of the cstecgi.cgi.
Vendor
Totolink
Product
X18 Firmware
CWE
CWE-94
Yayın Tarihi
2025-04-03 20:15:24
Güncelleme
2025-04-29 16:22:36
Source Identifier
cve@mitre.org
KEV Date Added
-

Kategoriler

CWE-94 X18 Firmware CRITICAL Totolink 2025

Referanslar

https://github.com/kn0sky/cve/blob/main/TOTOLINK%20X18/OS%20Command%20Injection%20setLanguageCfg_lang.md https://github.com/kn0sky/cve/blob/main/TOTOLINK%20X18/OS%20Command%20Injection%20setLanguageCfg_lang.md