X6000R Firmware
Approved changes feed: RSS · Atom
cpe:2.3:o:totolink:x6000r_firmware:*:*:*:*:*:*:*:*
part: o version: * update: *
| Vendor | Totolink (fa0129e6-aa24-5784-be77-22d8becdb79b) |
|---|---|
| Product | X6000R Firmware (e31d7b79-e7ec-564c-aa20-e5cd53519c87) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-4611 |
vulnerable | 2026-06-08 08:05:13.584624 |
TOTOLINK X6000R shttpd setLanCfg privilege escalation
HIGH (7.2)
A flaw has been found in TOTOLINK X6000R 9.4.0cu.1360_B20241207/9.4.0cu.1498_B20250826. Affected by this issue is the function setLanCfg of the file /usr/sbin/shttpd. Executing a manipulation of the argument Hostname can lead to os command injection. The attack may be launched remotely.
Published: 2026-03-23T21:13:27.140Z
Updated: 2026-03-25T19:14:18.836Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-52907 |
vulnerable | 2026-06-08 07:31:13.164619 |
TOTOLINK X6000R Security Bypass Vulnerability
Improper Input Validation vulnerability in TOTOLINK X6000R allows Command Injection, File Manipulation.This issue affects X6000R: through V9.4.0cu.1360_B20241207.
Published: 2025-09-24T18:12:36.634Z
Updated: 2025-09-24T18:46:23.907Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-52906 |
vulnerable | 2026-06-08 07:31:13.164062 |
TOTOLINK X6000R Command Injection Vulnerability
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in TOTOLINK X6000R allows OS Command Injection.This issue affects X6000R: through V9.4.0cu.1360_B20241207.
Published: 2025-09-24T17:44:29.539Z
Updated: 2025-09-24T18:24:07.786Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-52905 |
vulnerable | 2026-06-08 07:31:13.163512 |
TOTOLINK X6000R Argument Injection Vulnerability
Improper Input Validation vulnerability in TOTOLINK X6000R allows Flooding.This issue affects X6000R: through V9.4.0cu.1360_B20241207.
Published: 2025-09-23T17:53:49.090Z
Updated: 2025-09-23T18:36:45.425Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-11005 |
vulnerable | 2026-06-08 07:02:27.911540 |
TOTOLINK X6000R Unauthenticated Command Injection Vulnerability
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in TOTOLINK X6000R allows OS Command Injection.This issue affects X6000R: through V9.4.0cu.1458_B20250708.
Published: 2025-09-25T20:17:45.856Z
Updated: 2025-09-26T17:55:52.729Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.