CVE-2025-25605

Totolink X5000R V9.1.0u.6369_B20230113 is vulnerable to command injection via the apcli_wps_gen_pincode function in mtkwifi.lua.

Score

CVSS 3.1 6.5 Medium

Status

Analyzed - cve@mitre.org

Published

2025-02-21

Last modified

2025-02-21

Weaknesses

CWE-77

Affected products

• X5000r Firmware (Totolink)

References

• https://github.com/sezangel/IOT-vul/tree/main/Totolink/X5000R/4