Skip to content
OpenAdvisories

Product · Toto Link

X18

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 6.3
    CVE-2025-1829 EPSS 12%

    TOTOLINK X18 cstecgi.cgi setMtknatCfg os command injection

    A vulnerability was found in TOTOLINK X18 9.1.0cu.2024_B20220329. It has been declared as critical. This vulnerability affects the function setMtknatCfg of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument mtkhnatEnable leads to os command injec…

    Toto Link X18
  • Medium 6.3
    CVE-2025-1339

    TOTOLINK X18 cstecgi.cgi setL2tpdConfig os command injection

    A vulnerability was found in TOTOLINK X18 9.1.0cu.2024_B20220329. It has been rated as critical. This issue affects the function setL2tpdConfig of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument enable leads to os command injection. The attack…

    Toto Link X18
  • Medium 6.3
    CVE-2024-10966

    TOTOLINK X18 cstecgi.cgi os command injection

    A vulnerability, which was classified as critical, has been found in TOTOLINK X18 9.1.0cu.2024_B20220329. Affected by this issue is some unknown functionality of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument enable leads to os command inject…

    Toto Link X18