Critical · 9.8 CVE-2025-29209 EUVD-2025-11873GHSA-p688-g48x-vg8h

TOTOLINK X18 v9.1.0cu.2024_B20220329 has an unauthorized arbitrary command execution in the enable parameter' of the sub_41105C function of…

Published Apr 18, 2025 · Updated Apr 22, 2025 · Assigned by mitre

Description

TOTOLINK X18 v9.1.0cu.2024_B20220329 has an unauthorized arbitrary command execution in the enable parameter' of the sub_41105C function of cstecgi .cgi.

References

https://github.com/LZY0522/CVE/blob/main/X18-sub_41105c.md