VendorsTOTOLINKx6000rall versions
Vulnerabilities

TOTOLINK X6000R

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

56CVEs
CVE-2024-1781
Totolink X6000R AX3000 shttpd cstecgi.cgi setWizardCfg command injection
Published 2024-02-23 · Analyzed
9.8EPSS 0.148
CVE-2025-52906
TOTOLINK X6000R Command Injection Vulnerability
Published 2025-09-24 · Analyzed
9.8EPSS 0.128
CVE-2024-7907
TOTOLINK X6000R cstecgi.cgi setSyslogCfg command injection
Published 2024-08-18 · Analyzed
9.8EPSS 0.062
CVE-2025-52053
TOTOLINK X6000R V9.4.0cu.1360_B20241207 was found to contain a command injection vulnerability in the sub_417D74 function via the file_name parameter. This vulnerability allows unauthenticated attackers to execute arbitrary commands via a crafted request.
Published 2025-09-15 · Analyzed
9.8EPSS 0.044
CVE-2023-50651
TOTOLINK X6000R v9.4.0cu.852_B20230719 was discovered to contain a remote command execution (RCE) vulnerability via the component /cgi-bin/cstecgi.cgi.
Published 2023-12-30 · Modified
9.8EPSS 0.028
CVE-2023-46420
TOTOLINK X6000R v9.4.0cu.652_B20230116 was discovered to contain a remote command execution (RCE) vulnerability via the sub_41590C function.
Published 2023-10-25 · Modified
9.8EPSS 0.019
CVE-2023-46423
TOTOLINK X6000R v9.4.0cu.652_B20230116 was discovered to contain a remote command execution (RCE) vulnerability via the sub_417094 function.
Published 2023-10-25 · Modified
9.8EPSS 0.019
CVE-2023-46424
TOTOLINK X6000R v9.4.0cu.652_B20230116 was discovered to contain a remote command execution (RCE) vulnerability via the sub_422BD4 function.
Published 2023-10-25 · Modified
9.8EPSS 0.019
CVE-2023-46421
TOTOLINK X6000R v9.4.0cu.652_B20230116 was discovered to contain a remote command execution (RCE) vulnerability via the sub_411D00 function.
Published 2023-10-25 · Modified
9.8EPSS 0.019
CVE-2023-46419
TOTOLINK X6000R v9.4.0cu.652_B20230116 was discovered to contain a remote command execution (RCE) vulnerability via the sub_415730 function.
Published 2023-10-25 · Modified
9.8EPSS 0.019
CVE-2023-46415
TOTOLINK X6000R v9.4.0cu.652_B20230116 was discovered to contain a remote command execution (RCE) vulnerability via the sub_41E588 function.
Published 2023-10-25 · Modified
9.8EPSS 0.019
CVE-2023-46416
TOTOLINK X6000R v9.4.0cu.652_B20230116 was discovered to contain a remote command execution (RCE) vulnerability via the sub_ The 41A414 function.
Published 2023-10-25 · Modified
9.8EPSS 0.019
CVE-2023-46414
TOTOLINK X6000R v9.4.0cu.652_B20230116 was discovered to contain a remote command execution (RCE) vulnerability via the sub_ 41D494 function.
Published 2023-10-25 · Modified
9.8EPSS 0.019
CVE-2023-46422
TOTOLINK X6000R v9.4.0cu.652_B20230116 was discovered to contain a remote command execution (RCE) vulnerability via the sub_411994 function.
Published 2023-10-25 · Modified
9.8EPSS 0.019
CVE-2023-46417
TOTOLINK X6000R v9.4.0cu.652_B20230116 was discovered to contain a remote command execution (RCE) vulnerability via the sub_415498 function.
Published 2023-10-25 · Modified
9.8EPSS 0.019
CVE-2023-46418
TOTOLINK X6000R v9.4.0cu.652_B20230116 was discovered to contain a remote command execution (RCE) vulnerability via the sub_412688 function.
Published 2023-10-25 · Modified
9.8EPSS 0.019
CVE-2023-48801
In TOTOLINK X6000R_Firmware V9.4.0cu.852_B20230719, the shttpd file sub_415534 function obtains fields from the front-end, connects them through the snprintf function, and passes them to the CsteSystem function, resulting in a command execution vulnerability.
Published 2023-12-01 · Modified
9.8EPSS 0.017
CVE-2023-48800
In TOTOLINK X6000R_Firmware V9.4.0cu.852_B20230719, the shttpd file sub_417338 function obtains fields from the front-end, connects them through the snprintf function, and passes them to the CsteSystem function, resulting in a command execution vulnerability.
Published 2023-12-04 · Modified
9.8EPSS 0.016
CVE-2023-48807
In TOTOLINK X6000R V9.4.0cu.852_B20230719, the shttpd file, sub_4119A0 function obtains fields from the front-end through Uci_ Set_ The Str function when passed to the CsteSystem function creates a command execution vulnerability.
Published 2023-11-30 · Modified
9.8EPSS 0.015
CVE-2023-48808
In TOTOLINK X6000R V9.4.0cu.852_B20230719, the shttpd file, sub_4119A0 function obtains fields from the front-end through Uci_ Set_ The Str function when passed to the CsteSystem function creates a command execution vulnerability.
Published 2023-11-30 · Modified
9.8EPSS 0.015
CVE-2023-48810
In TOTOLINK X6000R V9.4.0cu.852_B20230719, the shttpd file, sub_4119A0 function obtains fields from the front-end through Uci_ Set_ The Str function when passed to the CsteSystem function creates a command execution vulnerability.
Published 2023-11-30 · Modified
9.8EPSS 0.015
CVE-2023-48811
In TOTOLINK X6000R V9.4.0cu.852_B20230719, the shttpd file, sub_4119A0 function obtains fields from the front-end through Uci_ Set_ The Str function that when passed to the CsteSystem function creates a command execution vulnerability.
Published 2023-11-30 · Modified
9.8EPSS 0.015
CVE-2023-48812
In TOTOLINK X6000R V9.4.0cu.852_B20230719, the shttpd file sub_4119A0 function obtains fields from the front-end through Uci_ Set_ The Str function that when passed to the CsteSystem function creates a command execution vulnerability.
Published 2023-11-30 · Modified
9.8EPSS 0.015
CVE-2023-48802
In TOTOLINK X6000R V9.4.0cu.852_B20230719, the shttpd file, sub_4119A0 function obtains fields from the front-end through Uci_ Set_ The Str function when passed to the CsteSystem function creates a command execution vulnerability.
Published 2023-11-30 · Modified
9.8EPSS 0.015
CVE-2023-48803
In TOTOLINK X6000R V9.4.0cu.852_B20230719, the shttpd file, sub_4119A0 function obtains fields from the front-end through Uci_ Set_ The Str function when passed to the CsteSystem function creates a command execution vulnerability.
Published 2023-11-30 · Modified
9.8EPSS 0.015
CVE-2023-48806
In TOTOLINK X6000R V9.4.0cu.852_B20230719, the shttpd file, sub_4119A0 function obtains fields from the front-end through Uci_ Set_ The Str function when passed to the CsteSystem function creates a command execution vulnerability.
Published 2023-11-30 · Modified
9.8EPSS 0.015
CVE-2023-48804
In TOTOLINK X6000R V9.4.0cu.852_B20230719, the shttpd file, sub_4119A0 function obtains fields from the front-end through Uci_ Set_ The Str function when passed to the CsteSystem function creates a command execution vulnerability.
Published 2023-11-30 · Modified
9.8EPSS 0.015
CVE-2023-48805
In TOTOLINK X6000R V9.4.0cu.852_B20230719, the shttpd file, sub_4119A0 function obtains fields from the front-end through Uci_ Set_ The Str function when passed to the CsteSystem function creates a command execution vulnerability.
Published 2023-11-30 · Modified
9.8EPSS 0.015
CVE-2023-43454
An issue in TOTOLINK X6000R V9.4.0cu.652_B20230116 and V9.4.0cu.852_B20230719 allows a remote attacker to execute arbitrary code via the hostName parameter of the switchOpMode component.
Published 2023-12-01 · Modified
9.8EPSS 0.015
CVE-2023-43453
An issue in TOTOLINK X6000R V9.4.0cu.652_B20230116 and V9.4.0cu.852_B20230719 allows a remote attacker to execute arbitrary code via the IP parameter of the setDiagnosisCfg component.
Published 2023-12-01 · Modified
9.8EPSS 0.015
CVE-2023-43455
An issue in TOTOLINK X6000R V9.4.0cu.652_B20230116 and V9.4.0cu.852_B20230719 allows a remote attacker to execute arbitrary code via the command parameter of the setting/setTracerouteCfg component.
Published 2023-12-01 · Modified
9.8EPSS 0.015
CVE-2023-46979
TOTOLINK X6000R V9.4.0cu.852_B20230719 was discovered to contain a command injection vulnerability via the enable parameter in the setLedCfg function.
Published 2023-10-31 · Modified
9.8EPSS 0.015
CVE-2023-48799
TOTOLINK-X6000R Firmware-V9.4.0cu.852_B20230719 is vulnerable to Command Execution.
Published 2023-12-04 · Modified
9.8EPSS 0.014
CVE-2023-46412
TOTOLINK X6000R v9.4.0cu.652_B20230116 was discovered to contain a command execution vulnerability via the sub_41D998 function.
Published 2023-10-25 · Modified
9.8EPSS 0.014
CVE-2023-46408
TOTOLINK X6000R v9.4.0cu.652_B20230116 was discovered to contain a command execution vulnerability via the sub_ The 41DD80 function.
Published 2023-10-25 · Modified
9.8EPSS 0.014
CVE-2023-46413
TOTOLINK X6000R v9.4.0cu.652_B20230116 was discovered to contain a command execution vulnerability via the sub_4155DC function.
Published 2023-10-25 · Modified
9.8EPSS 0.014
CVE-2023-46409
TOTOLINK X6000R v9.4.0cu.652_B20230116 was discovered to contain a command execution vulnerability via the sub_ 41CC04 function.
Published 2023-10-25 · Modified
9.8EPSS 0.014
CVE-2023-46410
TOTOLINK X6000R v9.4.0cu.652_B20230116 was discovered to contain a command execution vulnerability via the sub_ The 416F60 function.
Published 2023-10-25 · Modified
9.8EPSS 0.014
CVE-2023-46411
TOTOLINK X6000R v9.4.0cu.652_B20230116 was discovered to contain a command execution vulnerability via the sub_415258 function.
Published 2023-10-25 · Modified
9.8EPSS 0.014
CVE-2025-11005
TOTOLINK X6000R Unauthenticated Command Injection Vulnerability
Published 2025-09-25 · Analyzed
9.8EPSS 0.013
1 / 2Next →