TOTOLINK X6000R Firmware 9.4.0cu.652 B20230116
Approved changes feed: RSS · Atom
cpe:2.3:o:totolink:x6000r_firmware:9.4.0cu.652_b20230116:*:*:*:*:*:*:*
part: o version: 9.4.0cu.652_b20230116 update: *
| Vendor | Totolink (fa0129e6-aa24-5784-be77-22d8becdb79b) |
|---|---|
| Product | X6000R Firmware (e31d7b79-e7ec-564c-aa20-e5cd53519c87) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-25524 |
vulnerable | 2026-06-08 07:12:51.219559 |
Details available
Buffer overflow vulnerability in TOTOLink X6000R routers V9.4.0cu.652_B20230116 due to the lack of length verification, which is related to the addition of Wi-Fi filtering rules. Attackers who successfully exploit this vulnerability can cause the remote target device to crash or execute arbitrary commands.
Published: 2025-02-11T00:00:00.000Z
Updated: 2025-02-13T17:39:54.868Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-2353 |
vulnerable | 2026-06-08 06:33:30.916034 |
Totolink X6000R shttpd cstecgi.cgi setDiagnosisCfg os command injection
HIGH (8.8)
A vulnerability, which was classified as critical, has been found in Totolink X6000R 9.4.0cu.852_20230719. This issue affects the function setDiagnosisCfg of the file /cgi-bin/cstecgi.cgi of the component shttpd. The manipulation of the argument ip leads to os command injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-256313 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2024-03-10T07:31:04.225Z
Updated: 2024-08-12T13:49:53.588Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-46424 |
vulnerable | 2026-06-08 06:12:45.162879 |
Details available
TOTOLINK X6000R v9.4.0cu.652_B20230116 was discovered to contain a remote command execution (RCE) vulnerability via the sub_422BD4 function.
Published: 2023-10-25T00:00:00.000Z
Updated: 2024-09-12T18:07:34.900Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-46423 |
vulnerable | 2026-06-08 06:12:45.162449 |
Details available
TOTOLINK X6000R v9.4.0cu.652_B20230116 was discovered to contain a remote command execution (RCE) vulnerability via the sub_417094 function.
Published: 2023-10-25T00:00:00.000Z
Updated: 2024-09-11T15:33:58.755Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-46422 |
vulnerable | 2026-06-08 06:12:45.161970 |
Details available
TOTOLINK X6000R v9.4.0cu.652_B20230116 was discovered to contain a remote command execution (RCE) vulnerability via the sub_411994 function.
Published: 2023-10-25T00:00:00.000Z
Updated: 2024-09-11T15:34:07.112Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-46421 |
vulnerable | 2026-06-08 06:12:45.160918 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-46420 |
vulnerable | 2026-06-08 06:12:45.160101 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-46419 |
vulnerable | 2026-06-08 06:12:45.159569 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-46418 |
vulnerable | 2026-06-08 06:12:45.158822 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-46417 |
vulnerable | 2026-06-08 06:12:45.158394 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-46416 |
vulnerable | 2026-06-08 06:12:45.157831 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-46415 |
vulnerable | 2026-06-08 06:12:45.157162 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-46414 |
vulnerable | 2026-06-08 06:12:45.156471 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-46413 |
vulnerable | 2026-06-08 06:12:45.155888 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-46412 |
vulnerable | 2026-06-08 06:12:45.155525 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-46411 |
vulnerable | 2026-06-08 06:12:45.155162 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-46410 |
vulnerable | 2026-06-08 06:12:45.154784 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-46409 |
vulnerable | 2026-06-08 06:12:45.154171 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-46408 |
vulnerable | 2026-06-08 06:12:45.151764 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-43455 |
vulnerable | 2026-06-08 06:12:31.548266 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-43454 |
vulnerable | 2026-06-08 06:12:31.546997 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-43453 |
vulnerable | 2026-06-08 06:12:31.542604 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.