TOTOLINK X5000r Firmware 9.1.0u.6369 B20230113
Approved changes feed: RSS · Atom
cpe:2.3:o:totolink:x5000r_firmware:9.1.0u.6369_b20230113:*:*:*:*:*:*:*
part: o version: 9.1.0u.6369_b20230113 update: *
| Vendor | Totolink (fa0129e6-aa24-5784-be77-22d8becdb79b) |
|---|---|
| Product | X5000R Firmware (ed2fe159-ed72-562e-9201-6283d6e50b7f) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-25605 |
vulnerable | 2026-06-08 07:12:51.251818 |
Details available
Totolink X5000R V9.1.0u.6369_B20230113 is vulnerable to command injection via the apcli_wps_gen_pincode function in mtkwifi.lua.
Published: 2025-02-21T00:00:00.000Z
Updated: 2025-02-21T21:03:17.838Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-25604 |
vulnerable | 2026-06-08 07:12:51.250692 |
Details available
Totolink X5000R V9.1.0u.6369_B20230113 is vulnerable to command injection via the vif_disable function in mtkwifi.lua.
Published: 2025-02-21T00:00:00.000Z
Updated: 2025-02-21T21:04:36.877Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-13184 |
vulnerable | 2026-06-08 07:04:31.750840 |
Unauthenticated Telnet enablement via cstecgi.cgi (auth bypass) leading to unauthenticated root login with a blank password
Unauthenticated Telnet enablement via cstecgi.cgi (auth bypass) leading to unauthenticated root login with a blank password on factory/reset X5000R V9.1.0u.6369_B20230113 (arbitrary command execution). Earlier versions that share the same implementation, may also be affected.
Published: 2025-12-10T12:34:54.590Z
Updated: 2025-12-10T15:21:20.666Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-42748 |
vulnerable | 2026-06-08 06:45:46.925001 |
Details available
In TOTOLINK X5000r v9.1.0cu.2350_b20230313, the file /cgi-bin/cstecgi.cgi contains an OS command injection vulnerability in setWiFiWpsCfg. Authenticated Attackers can send malicious packet to execute arbitrary commands.
Published: 2024-08-12T00:00:00.000Z
Updated: 2024-08-13T14:30:52.666Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-42747 |
vulnerable | 2026-06-08 06:45:46.924320 |
Details available
In TOTOLINK X5000r v9.1.0cu.2350_b20230313, the file /cgi-bin/cstecgi.cgi contains an OS command injection vulnerability in setWanIeCfg. Authenticated Attackers can send malicious packet to execute arbitrary commands.
Published: 2024-08-12T00:00:00.000Z
Updated: 2024-08-13T16:14:00.576Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-42745 |
vulnerable | 2026-06-08 06:45:46.923786 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-42744 |
vulnerable | 2026-06-08 06:45:46.923026 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-42743 |
vulnerable | 2026-06-08 06:45:46.913960 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-42742 |
vulnerable | 2026-06-08 06:45:46.913333 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-42741 |
vulnerable | 2026-06-08 06:45:46.912711 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-42739 |
vulnerable | 2026-06-08 06:45:46.911609 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-42738 |
vulnerable | 2026-06-08 06:45:46.910969 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-42737 |
vulnerable | 2026-06-08 06:45:46.910211 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-25468 |
vulnerable | 2026-06-08 06:31:22.986800 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-33487 |
vulnerable | 2026-06-08 06:06:23.213214 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-33486 |
vulnerable | 2026-06-08 06:06:23.212761 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-33485 |
vulnerable | 2026-06-08 06:06:23.212171 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-30013 |
vulnerable | 2026-06-08 06:02:43.786439 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.