[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fUQagZ5rxVWkIoAYiY37SH_YJuRO7DY9QVwog4YJnPtA":3,"g5a-ex:totolink\u002Fx6000r_firmware@*":113,"g5a-family:totolink\u002Fx6000r_firmware":115},{"success":4,"data":5},true,{"product":6,"versions":27,"topVulnerabilitiesByEpss":32,"kevVulnerabilities":90,"seoMetadata":91,"meta":110},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":26},"totolink","x6000r_firmware",4,54,0,"2025-09-25",[14,18,20,23],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},"9.4.0cu.1041_b20240224",1,false,{"version":19,"cve_count":16,"kev_count":11,"has_kev":17},"9.4.0cu.1360_b20241207",{"version":21,"cve_count":22,"kev_count":11,"has_kev":17},"9.4.0cu.652_b20230116",21,{"version":24,"cve_count":25,"kev_count":11,"has_kev":17},"9.4.0cu.852_b20230719",30,"X6000r Firmware by Totolink is a technology product with 4 tracked versions and 54 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[28,29,30,31],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},{"version":19,"cve_count":16,"kev_count":11,"has_kev":17},{"version":21,"cve_count":22,"kev_count":11,"has_kev":17},{"version":24,"cve_count":25,"kev_count":11,"has_kev":17},[33,41,48,55,62,68,73,79,84,87],{"cveId":34,"description":35,"publishedDate":36,"cvssScore":37,"cvssVersion":38,"severity":39,"isKev":17,"epssScore":40},"CVE-2024-1781","A vulnerability was found in Totolink X6000R AX3000 9.4.0cu.852_20230719. It has been rated as critical. This issue affects the function setWizardCfg of the file \u002Fcgi-bin\u002Fcstecgi.cgi of the component shttpd. The manipulation leads to command injection. The exploit has been disclosed to the public and may be used. The identifier VDB-254573 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.","2024-02-23",6.3,"v3.1","Medium",0.14809,{"cveId":42,"description":43,"publishedDate":44,"cvssScore":45,"cvssVersion":38,"severity":46,"isKev":17,"epssScore":47},"CVE-2025-52906","Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in TOTOLINK X6000R allows OS Command Injection.This issue affects X6000R: through V9.4.0cu.1360_B20241207.","2025-09-24",9.8,"Critical",0.13463,{"cveId":49,"description":50,"publishedDate":51,"cvssScore":52,"cvssVersion":38,"severity":53,"isKev":17,"epssScore":54},"CVE-2025-52905","Improper Input Validation vulnerability in TOTOLINK X6000R allows Flooding.This issue affects X6000R: through V9.4.0cu.1360_B20241207.","2025-09-23",7.5,"High",0.08445,{"cveId":56,"description":57,"publishedDate":58,"cvssScore":59,"cvssVersion":60,"severity":39,"isKev":17,"epssScore":61},"CVE-2024-7907","A vulnerability, which was classified as critical, has been found in TOTOLINK X6000R 9.4.0cu.852_20230719. This issue affects the function setSyslogCfg of the file \u002Fcgi-bin\u002Fcstecgi.cgi. The manipulation of the argument rtLogServer leads to command injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.","2024-08-18",5.3,"v4.0",0.06239,{"cveId":63,"description":64,"publishedDate":65,"cvssScore":66,"cvssVersion":38,"severity":53,"isKev":17,"epssScore":67},"CVE-2024-2353","A vulnerability, which was classified as critical, has been found in Totolink X6000R 9.4.0cu.852_20230719. This issue affects the function setDiagnosisCfg of the file \u002Fcgi-bin\u002Fcstecgi.cgi of the component shttpd. The manipulation of the argument ip leads to os command injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-256313 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.","2024-03-10",8.8,0.03952,{"cveId":69,"description":70,"publishedDate":71,"cvssScore":45,"cvssVersion":38,"severity":46,"isKev":17,"epssScore":72},"CVE-2023-50651","TOTOLINK X6000R v9.4.0cu.852_B20230719 was discovered to contain a remote command execution (RCE) vulnerability via the component \u002Fcgi-bin\u002Fcstecgi.cgi.","2023-12-30",0.02802,{"cveId":74,"description":75,"publishedDate":76,"cvssScore":77,"cvssVersion":38,"severity":39,"isKev":17,"epssScore":78},"CVE-2025-52284","Totolink X6000R V9.4.0cu.1360_B20241207 was found to contain a command injection vulnerability in the sub_4184C0 function via the tz parameter. This vulnerability allows unauthenticated attackers to execute arbitrary commands via a crafted request.","2025-07-29",6.5,0.02282,{"cveId":80,"description":81,"publishedDate":82,"cvssScore":45,"cvssVersion":38,"severity":46,"isKev":17,"epssScore":83},"CVE-2023-46418","TOTOLINK X6000R v9.4.0cu.652_B20230116 was discovered to contain a remote command execution (RCE) vulnerability via the sub_412688 function.","2023-10-25",0.01852,{"cveId":85,"description":86,"publishedDate":82,"cvssScore":45,"cvssVersion":38,"severity":46,"isKev":17,"epssScore":83},"CVE-2023-46419","TOTOLINK X6000R v9.4.0cu.652_B20230116 was discovered to contain a remote command execution (RCE) vulnerability via the sub_415730 function.",{"cveId":88,"description":89,"publishedDate":82,"cvssScore":45,"cvssVersion":38,"severity":46,"isKev":17,"epssScore":83},"CVE-2023-46422","TOTOLINK X6000R v9.4.0cu.652_B20230116 was discovered to contain a remote command execution (RCE) vulnerability via the sub_411994 function.",[],{"title":92,"metaDescription":93,"keywords":94,"structuredData":95},"X6000r Firmware by Totolink - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for X6000r Firmware by Totolink covering 4 versions with 54 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","X6000r Firmware vulnerabilities, X6000r Firmware security, X6000r Firmware CVE, Totolink X6000r Firmware, X6000r Firmware threat intelligence, Totolink security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":96,"@type":97,"name":98,"description":93,"url":99,"manufacturer":100,"applicationCategory":104,"softwareVersion":105,"mainEntity":106},"https:\u002F\u002Fschema.org","SoftwareApplication","X6000r Firmware","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Ftotolink\u002Fx6000r_firmware",{"@type":101,"name":102,"url":103},"Organization","Totolink","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Ftotolink","Security Software","4 versions tracked",{"@type":107,"name":108,"description":109,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","X6000r Firmware Security Vulnerabilities","Security vulnerabilities affecting X6000r Firmware by Totolink",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":111,"apiVersion":112},"2026-10-17T20:28:02.385Z","3.0",{"rows":114,"total":11,"capped":17,"failed":11},[],[]]