Approved changes feed: RSS · Atom

cpe:2.3:h:totolink:x6000r:-:*:*:*:*:*:*:*

part: h version: - update: *

VendorTotolink (fa0129e6-aa24-5784-be77-22d8becdb79b)
ProductX6000R (47e820a6-c282-59b4-b588-c7622f1ebb41)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-4611 not_vulnerable 2026-06-08 08:05:13.587413 TOTOLINK X6000R shttpd setLanCfg privilege escalation
HIGH (7.2)
A flaw has been found in TOTOLINK X6000R 9.4.0cu.1360_B20241207/9.4.0cu.1498_B20250826. Affected by this issue is the function setLanCfg of the file /usr/sbin/shttpd. Executing a manipulation of the argument Hostname can lead to os command injection. The attack may be launched remotely.
Published: 2026-03-23T21:13:27.140Z
Updated: 2026-03-25T19:14:18.836Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-70328 not_vulnerable 2026-06-08 07:43:16.974989 Details available
TOTOLINK X6000R v9.4.0cu.1498_B20250826 contains an OS command injection vulnerability in the NTPSyncWithHost handler of the /usr/sbin/shttpd executable. The host_time parameter is retrieved via sub_40C404 and passed to a date -s shell command through CsteSystem. While the first two tokens of the input are validated, the remainder of the string is not sanitized, allowing authenticated attackers to execute arbitrary shell commands via shell metacharacters.
Published: 2026-02-23T00:00:00.000Z
Updated: 2026-02-25T14:41:45.200Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-52907 not_vulnerable 2026-06-08 07:31:13.164720 TOTOLINK X6000R Security Bypass Vulnerability
Improper Input Validation vulnerability in TOTOLINK X6000R allows Command Injection, File Manipulation.This issue affects X6000R: through V9.4.0cu.1360_B20241207.
Published: 2025-09-24T18:12:36.634Z
Updated: 2025-09-24T18:46:23.907Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-52906 not_vulnerable 2026-06-08 07:31:13.164091 TOTOLINK X6000R Command Injection Vulnerability
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in TOTOLINK X6000R allows OS Command Injection.This issue affects X6000R: through V9.4.0cu.1360_B20241207.
Published: 2025-09-24T17:44:29.539Z
Updated: 2025-09-24T18:24:07.786Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-52905 not_vulnerable 2026-06-08 07:31:13.163559 TOTOLINK X6000R Argument Injection Vulnerability
Improper Input Validation vulnerability in TOTOLINK X6000R allows Flooding.This issue affects X6000R: through V9.4.0cu.1360_B20241207.
Published: 2025-09-23T17:53:49.090Z
Updated: 2025-09-23T18:36:45.425Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-52284 not_vulnerable 2026-06-08 07:31:11.434388 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-52053 not_vulnerable 2026-06-08 07:31:11.355789 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-25524 not_vulnerable 2026-06-08 07:12:51.220185 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-11005 not_vulnerable 2026-06-08 07:02:27.912438 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-7907 not_vulnerable 2026-06-08 06:58:23.885688 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-7907 vulnerable 2026-06-08 06:58:23.883612 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-52723 not_vulnerable 2026-06-08 06:52:16.183448 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-2353 not_vulnerable 2026-06-08 06:33:30.918024 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-1781 not_vulnerable 2026-06-08 06:27:14.485669 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-1781 vulnerable 2026-06-08 06:27:14.483603 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-52042 not_vulnerable 2026-06-08 06:17:54.168422 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-52041 not_vulnerable 2026-06-08 06:17:54.167903 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-52040 not_vulnerable 2026-06-08 06:17:54.167402 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-52039 not_vulnerable 2026-06-08 06:17:54.166850 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-52038 not_vulnerable 2026-06-08 06:17:54.166050 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-50651 not_vulnerable 2026-06-08 06:16:16.282484 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-48812 not_vulnerable 2026-06-08 06:14:28.180453 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-48811 not_vulnerable 2026-06-08 06:14:28.179969 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-48810 not_vulnerable 2026-06-08 06:14:28.179522 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-48808 not_vulnerable 2026-06-08 06:14:28.179145 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-48807 not_vulnerable 2026-06-08 06:14:28.178563 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-48806 not_vulnerable 2026-06-08 06:14:28.178171 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-48805 not_vulnerable 2026-06-08 06:14:28.177622 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-48804 not_vulnerable 2026-06-08 06:14:28.177149 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-48803 not_vulnerable 2026-06-08 06:14:28.176673 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-48802 not_vulnerable 2026-06-08 06:14:28.176299 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-48801 not_vulnerable 2026-06-08 06:14:28.175702 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-48800 not_vulnerable 2026-06-08 06:14:28.175192 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-48799 not_vulnerable 2026-06-08 06:14:28.174741 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-46979 not_vulnerable 2026-06-08 06:14:23.748926 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-46978 not_vulnerable 2026-06-08 06:14:23.748125 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-46485 not_vulnerable 2026-06-08 06:12:45.215543 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-46484 not_vulnerable 2026-06-08 06:12:45.215106 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-46424 not_vulnerable 2026-06-08 06:12:45.163061 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-46423 not_vulnerable 2026-06-08 06:12:45.162515 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-46422 not_vulnerable 2026-06-08 06:12:45.162053 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-46421 not_vulnerable 2026-06-08 06:12:45.161191 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-46420 not_vulnerable 2026-06-08 06:12:45.160266 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-46419 not_vulnerable 2026-06-08 06:12:45.159635 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-46418 not_vulnerable 2026-06-08 06:12:45.158991 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-46417 not_vulnerable 2026-06-08 06:12:45.158457 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-46416 not_vulnerable 2026-06-08 06:12:45.158004 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-46415 not_vulnerable 2026-06-08 06:12:45.157232 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-46414 not_vulnerable 2026-06-08 06:12:45.156664 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-46413 not_vulnerable 2026-06-08 06:12:45.156074 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-46412 not_vulnerable 2026-06-08 06:12:45.155592 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-46411 not_vulnerable 2026-06-08 06:12:45.155218 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-46410 not_vulnerable 2026-06-08 06:12:45.154848 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-46409 not_vulnerable 2026-06-08 06:12:45.154398 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-46408 not_vulnerable 2026-06-08 06:12:45.151833 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-43455 not_vulnerable 2026-06-08 06:12:31.548405 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-43454 not_vulnerable 2026-06-08 06:12:31.547192 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-43453 not_vulnerable 2026-06-08 06:12:31.546293 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.