Login Request a demo
X5
Product
X5000R
by Totolink · last CVE Sep 3, 2025
8
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities8In the news0Timeline
Severity mix
Critical 5High 3Medium 0Low 0
Severity
All severities8Critical5High3Medium0Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add X5000R to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-9934
9.8
3%
Sep 3
TOTOLINK X5000R cstecgi.cgi sub_410C34 command injection
Affected: 9.1.0cu.2415_B20250515
CVE-2024-32353
9.8
2%
May 14
TOTOLINK X5000R V9.1.0cu.2350_B20230313 was discovered to contain a command injection vulnerability via the 'port' parameter in the setSSServer function at /cgi-bin/cstecgi.cgi
Affected: 9.1.0cu.2350_B20230313
CVE-2023-6612
9.8
31%
Dec 8
Totolink X5000R cstecgi.cgi setWizardCfg os command injection
Affected: 9.1.0cu.2300_B20230112
CVE-2023-39617
9.8
2%
Aug 21
TOTOLINK X5000R_V9.1.0cu.2089_B20211224 and X5000R_V9.1.0cu.2350_B20230313 were discovered to contain a remote code execution (RCE) vulnerability via the lang parameter in the…
Affected: v9.1.0cu.2089_b20211224; v9.1.0cu.2350_b20230313
CVE-2023-39618
9.8
2%
Aug 21
TOTOLINK X5000R B20210419 was discovered to contain a remote code execution (RCE) vulnerability via the setTracerouteCfg interface
Affected: b20210419
CVE-2024-42739
8.8
2%
Aug 13
In TOTOLINK X5000r v9.1.0cu.2350_b20230313, the file /cgi-bin/cstecgi.cgi contains an OS command injection vulnerability in setAccessDeviceCfg
Affected: v9.1.0cu.2350_b20230313
CVE-2024-42745
8.8
2%
Aug 12
In TOTOLINK X5000r v9.1.0cu.2350_b20230313, the file /cgi-bin/cstecgi.cgi contains an OS command injection vulnerability in setUPnPCfg
Affected: v9.1.0cu.2350_b20230313
CVE-2024-32352
8.8
2%
May 14
TOTOLINK X5000R V9.1.0cu.2350_B20230313 was discovered to contain an authenticated remote command execution (RCE) vulnerability via the "ipsecL2tpEnable" parameter in the…
Affected: V9.1.0cu.2350_B20230313
Showing 8