X18 vulnerabilities

4 known vulnerabilities in X18 from TOTOLINK. 4 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  X18: Improper Neutralization of Special Elements used in an OS Command

  CVE-2025-1829Mar 2, 2025TOTOLINKEPSS 12.4%

  A vulnerability was found in TOTOLINK X18 9.1.0cu.2024_B20220329. It has been declared as critical. This vulnerability affects the function setMtknatCfg of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument mtkhnatEnable leads to os command inject

• 8.8 High severity

  X18: Out-of-bounds Write

  CVE-2025-1340Feb 16, 2025TOTOLINKEPSS 16.7%

  A vulnerability classified as critical has been found in TOTOLINK X18 9.1.0cu.2024_B20220329. Affected is the function setPasswordCfg of the file /cgi-bin/cstecgi.cgi. The manipulation as part of String leads to stack-based buffer overflow. It is possible to l

• 8.8 High severity

  X18: Improper Neutralization of Special Elements used in a Command

  CVE-2025-1339Feb 16, 2025TOTOLINKEPSS 2.57%

  A vulnerability was found in TOTOLINK X18 9.1.0cu.2024_B20220329. It has been rated as critical. This issue affects the function setL2tpdConfig of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument enable leads to os command injection. The attack

• 8.8 High severity

  X18: Improper Neutralization of Special Elements used in a Command

  CVE-2024-10966Nov 7, 2024TOTOLINKEPSS 3.23%

  A vulnerability, which was classified as critical, has been found in TOTOLINK X18 9.1.0cu.2024_B20220329. Affected by this issue is some unknown functionality of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument enable leads to os command injecti