X5000r Firmware vulnerabilities
45 known vulnerabilities in X5000r Firmware from TOTOLINK. 45 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 9.8 Critical severity
X5000r Firmware: Improper Neutralization of Special Elements used in an OS Command
TOTOLINK X5000R V9.1.0u.6118_B20201102 and V9.1.0u.6369_B20230113 contain a command insertion vulnerability in setting/setTracerouteCfg. This vulnerability allows an attacker to execute arbitrary commands through the "command" parameter.
- 9.8 Critical severity
x5000r_firmware: Improper Neutralization of Special Elements used in an OS Command
Totolink routers s X5000R V9.1.0u.6118_B20201102 and A7000R V9.1.0u.6115_B20201022 were discovered to contain a command injection vulnerability in the setWanCfg function via the hostName parameter. This vulnerability allows attackers to execute arbitrary comma
- 9.8 Critical severity
x5000r_firmware: Improper Neutralization of Special Elements used in an OS Command
Totolink routers s X5000R V9.1.0u.6118_B20201102 and A7000R V9.1.0u.6115_B20201022 were discovered to contain a command injection vulnerability in the Tunnel 6in4 function via the remote6in4 parameter. This vulnerability allows attackers to execute arbitrary c
- 9.8 Critical severity
x5000r_firmware: Improper Neutralization of Special Elements used in an OS Command
Totolink routers s X5000R V9.1.0u.6118_B20201102 and A7000R V9.1.0u.6115_B20201022 were discovered to contain a command injection vulnerability in the Tunnel 6rd function via the relay6rd parameter. This vulnerability allows attackers to execute arbitrary comm
- 9.8 Critical severity
X5000r Firmware: Improper Neutralization of Special Elements used in an OS Command
Totolink X5000R_Firmware v9.1.0u.6118_B20201102 was discovered to contain a command injection vulnerability in the function setNtpCfg, via the tz parameters. This vulnerability allows attackers to execute arbitrary commands via a crafted request.