← Database

CVE-2025-13184

CRITICAL CVSS: 9.8 Published: 2025-12-10 Modified: 2026-06-17

Description

Unauthenticated Telnet enablement via cstecgi.cgi (auth bypass) leading to unauthenticated root login with a blank password on factory/reset X5000R V9.1.0u.6369_B20230113 (arbitrary command execution). Earlier versions that share the same implementation, may also be affected.

Affected Platforms

Totolink X5000R FirmwareTotolink X5000R

Weakness Type

CWE-863

References