Remote Code Execution Vulnerability in TOTOLINK Router
CVE-2025-29064

9.8CRITICAL

Key Information:

Vendor
TOTOLINK
Status
x18 Router
Vendor
CVE Published:
3 April 2025

Summary

An exploit in the TOTOLINK x18 router allows remote attackers to execute arbitrary code by targeting the sub_410E54 function within the cstecgi.cgi script. This vulnerability poses serious risks, enabling unauthorized access and compromising user data.

References

https://github.com/kn0sky/cve/blob/main/TOTOLINK%20X18/OS...

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.