CVE-2025-52284

Medium CVSS: 6.5

Totolink X6000R V9.4.0cu.1360_B20241207 was found to contain a command injection vulnerability in the sub_4184C0 function via the tz parameter. This vulnerability allows unauthenticated attackers to execute arbitrary commands via a crafted request.

Vendor

Totolink

Product

X6000r Firmware

CWE

CWE-77

Yayın Tarihi

2025-07-29 18:15:30

Güncelleme

2025-09-15 15:15:54

Source Identifier

cve@mitre.org

KEV Date Added

Kategoriler

CWE-77 X6000r Firmware MEDIUM Totolink 2025

Referanslar

https://github.com/w0rkd4tt/Totolink https://www.notion.so/setNtpCfg-20e8aff2dc8b80a3afafef36b48f7496

Benzer Kayıtlar

Critical

CVE-2026-31027

TOTOlink A3600R v5.9c.4959 contains a buffer overflow vulnerability in the setAppEasyWizardConfig interface of /lib/cste…

Medium

CVE-2026-5178

A security vulnerability has been detected in Totolink A3300R 17.0.0cu.557_b20221024. Affected by this issue is the func…

Medium

CVE-2026-5177

A weakness has been identified in Totolink A3300R 17.0.0cu.557_b20221024. Affected by this vulnerability is the function…

Medium

CVE-2026-5176

A security flaw has been discovered in Totolink A3300R 17.0.0cu.557_b20221024. Affected is the function setSyslogCfg of…

Medium

CVE-2026-5105

A vulnerability was detected in Totolink A3300R 17.0.0cu.557_b20221024. The affected element is the function setVpnPassC…

Medium

CVE-2026-5104

A security vulnerability has been detected in Totolink A3300R 17.0.0cu.557_b20221024. Impacted is the function setStatic…