Totolink

X18 Firmware

14 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
9.8

CVE-2025-61044

Exploit
  • EPSS 5.76%
  • Published 01.10.2025 15:15:49
  • Last modified 07.10.2025 18:16:32

TOTOLINK X18 V9.1.0cu.2053_B20230309 was discovered to contain a command injection vulnerability via the agentName parameter in the setEasyMeshAgentCfg function.

9.8

CVE-2025-61045

Exploit
  • EPSS 5.76%
  • Published 01.10.2025 15:15:49
  • Last modified 07.10.2025 18:16:23

TOTOLINK X18 V9.1.0cu.2053_B20230309 was discovered to contain a command injection vulnerability via the mac parameter in the setEasyMeshAgentCfg function.

9.8

CVE-2025-29209

Exploit
  • EPSS 0.64%
  • Published 18.04.2025 00:00:00
  • Last modified 29.04.2025 16:23:36

TOTOLINK X18 v9.1.0cu.2024_B20220329 has an unauthorized arbitrary command execution in the enable parameter' of the sub_41105C function of cstecgi .cgi.

9.8

CVE-2025-29064

  • EPSS 1.04%
  • Published 03.04.2025 00:00:00
  • Last modified 29.04.2025 16:22:36

An issue in TOTOLINK x18 v.9.1.0cu.2024_B20220329 allows a remote attacker to execute arbitrary code via the sub_410E54 function of the cstecgi.cgi.

8.8

CVE-2025-1829

Exploit
  • EPSS 1.07%
  • Published 02.03.2025 19:15:10
  • Last modified 03.04.2025 15:35:58

A vulnerability was found in TOTOLINK X18 9.1.0cu.2024_B20220329. It has been declared as critical. This vulnerability affects the function setMtknatCfg of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument mtkhnatEnable leads to os comm...

8.8

CVE-2025-1340

  • EPSS 0.12%
  • Published 16.02.2025 14:15:21
  • Last modified 10.03.2025 17:14:20

A vulnerability classified as critical has been found in TOTOLINK X18 9.1.0cu.2024_B20220329. Affected is the function setPasswordCfg of the file /cgi-bin/cstecgi.cgi. The manipulation as part of String leads to stack-based buffer overflow. It is pos...

8.8

CVE-2025-1339

  • EPSS 0.3%
  • Published 16.02.2025 12:15:08
  • Last modified 10.03.2025 17:11:37

A vulnerability was found in TOTOLINK X18 9.1.0cu.2024_B20220329. It has been rated as critical. This issue affects the function setL2tpdConfig of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument enable leads to os command injection. T...

8.8

CVE-2024-10966

Exploit
  • EPSS 3.8%
  • Published 07.11.2024 18:15:16
  • Last modified 16.12.2024 23:05:44

A vulnerability, which was classified as critical, has been found in TOTOLINK X18 9.1.0cu.2024_B20220329. Affected by this issue is some unknown functionality of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument enable leads to os comma...

9.8

CVE-2023-29800

Exploit
  • EPSS 1.45%
  • Published 14.04.2023 14:15:11
  • Last modified 06.02.2025 21:15:19

TOTOLINK X18 V9.1.0cu.2024_B20220329 was discovered to contain a command injection vulnerability via the FileName parameter in the UploadFirmwareFile function.

9.8

CVE-2023-29801

Exploit
  • EPSS 1.45%
  • Published 14.04.2023 14:15:11
  • Last modified 06.02.2025 21:15:19

TOTOLINK X18 V9.1.0cu.2024_B20220329 was discovered to contain multiple command injection vulnerabilities via the rtLogEnabled and rtLogServer parameters in the setSyslogCfg function.