[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fC6f6TVGhb3Eo99hdWzURRrNmYAN2x-66T1yhxByqVb4":3,"g5a-ex:totolink\u002Fx6000r@*":97,"g5a-family:totolink\u002Fx6000r":99},{"success":4,"data":5},true,{"product":6,"versions":14,"topVulnerabilitiesByEpss":15,"kevVulnerabilities":74,"seoMetadata":75,"meta":94},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":9,"lastCveUpdate":11,"versions":12,"description":13},"totolink","x6000r",0,53,"2025-09-25",[],"X6000r by Totolink is a technology product and 53 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[],[16,25,32,39,46,52,57,63,68,71],{"cveId":17,"description":18,"publishedDate":19,"cvssScore":20,"cvssVersion":21,"severity":22,"isKev":23,"epssScore":24},"CVE-2024-1781","A vulnerability was found in Totolink X6000R AX3000 9.4.0cu.852_20230719. It has been rated as critical. This issue affects the function setWizardCfg of the file \u002Fcgi-bin\u002Fcstecgi.cgi of the component shttpd. The manipulation leads to command injection. The exploit has been disclosed to the public and may be used. The identifier VDB-254573 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.","2024-02-23",6.3,"v3.1","Medium",false,0.14809,{"cveId":26,"description":27,"publishedDate":28,"cvssScore":29,"cvssVersion":21,"severity":30,"isKev":23,"epssScore":31},"CVE-2025-52906","Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in TOTOLINK X6000R allows OS Command Injection.This issue affects X6000R: through V9.4.0cu.1360_B20241207.","2025-09-24",9.8,"Critical",0.13463,{"cveId":33,"description":34,"publishedDate":35,"cvssScore":36,"cvssVersion":21,"severity":37,"isKev":23,"epssScore":38},"CVE-2025-52905","Improper Input Validation vulnerability in TOTOLINK X6000R allows Flooding.This issue affects X6000R: through V9.4.0cu.1360_B20241207.","2025-09-23",7.5,"High",0.08445,{"cveId":40,"description":41,"publishedDate":42,"cvssScore":43,"cvssVersion":44,"severity":22,"isKev":23,"epssScore":45},"CVE-2024-7907","A vulnerability, which was classified as critical, has been found in TOTOLINK X6000R 9.4.0cu.852_20230719. This issue affects the function setSyslogCfg of the file \u002Fcgi-bin\u002Fcstecgi.cgi. The manipulation of the argument rtLogServer leads to command injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.","2024-08-18",5.3,"v4.0",0.06239,{"cveId":47,"description":48,"publishedDate":49,"cvssScore":50,"cvssVersion":21,"severity":37,"isKev":23,"epssScore":51},"CVE-2024-2353","A vulnerability, which was classified as critical, has been found in Totolink X6000R 9.4.0cu.852_20230719. This issue affects the function setDiagnosisCfg of the file \u002Fcgi-bin\u002Fcstecgi.cgi of the component shttpd. The manipulation of the argument ip leads to os command injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-256313 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.","2024-03-10",8.8,0.03952,{"cveId":53,"description":54,"publishedDate":55,"cvssScore":29,"cvssVersion":21,"severity":30,"isKev":23,"epssScore":56},"CVE-2023-50651","TOTOLINK X6000R v9.4.0cu.852_B20230719 was discovered to contain a remote command execution (RCE) vulnerability via the component \u002Fcgi-bin\u002Fcstecgi.cgi.","2023-12-30",0.02802,{"cveId":58,"description":59,"publishedDate":60,"cvssScore":61,"cvssVersion":21,"severity":22,"isKev":23,"epssScore":62},"CVE-2025-52284","Totolink X6000R V9.4.0cu.1360_B20241207 was found to contain a command injection vulnerability in the sub_4184C0 function via the tz parameter. This vulnerability allows unauthenticated attackers to execute arbitrary commands via a crafted request.","2025-07-29",6.5,0.02282,{"cveId":64,"description":65,"publishedDate":66,"cvssScore":29,"cvssVersion":21,"severity":30,"isKev":23,"epssScore":67},"CVE-2023-46418","TOTOLINK X6000R v9.4.0cu.652_B20230116 was discovered to contain a remote command execution (RCE) vulnerability via the sub_412688 function.","2023-10-25",0.01852,{"cveId":69,"description":70,"publishedDate":66,"cvssScore":29,"cvssVersion":21,"severity":30,"isKev":23,"epssScore":67},"CVE-2023-46419","TOTOLINK X6000R v9.4.0cu.652_B20230116 was discovered to contain a remote command execution (RCE) vulnerability via the sub_415730 function.",{"cveId":72,"description":73,"publishedDate":66,"cvssScore":29,"cvssVersion":21,"severity":30,"isKev":23,"epssScore":67},"CVE-2023-46422","TOTOLINK X6000R v9.4.0cu.652_B20230116 was discovered to contain a remote command execution (RCE) vulnerability via the sub_411994 function.",[],{"title":76,"metaDescription":77,"keywords":78,"structuredData":79},"X6000r by Totolink - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for X6000r by Totolink with 53 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","X6000r vulnerabilities, X6000r security, X6000r CVE, Totolink X6000r, X6000r threat intelligence, Totolink security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":80,"@type":81,"name":82,"description":77,"url":83,"manufacturer":84,"applicationCategory":88,"softwareVersion":89,"mainEntity":90},"https:\u002F\u002Fschema.org","SoftwareApplication","X6000r","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Ftotolink\u002Fx6000r",{"@type":85,"name":86,"url":87},"Organization","Totolink","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Ftotolink","Security Software","Multiple versions",{"@type":91,"name":92,"description":93,"vulnerabilityCount":10,"dateModified":11},"SecurityVulnerability","X6000r Security Vulnerabilities","Security vulnerabilities affecting X6000r by Totolink",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":9,"lastUpdated":11,"generatedAt":95,"apiVersion":96},"2026-10-18T14:17:44.556Z","3.0",{"rows":98,"total":9,"capped":23,"failed":9},[],[100],{"product":101,"cves":102},"x6000r_firmware",54]