Syntax: kev:true severity:critical epss:>0.95 vendor:cisco patch:false
Filters
Severity
Exploitation
Data Source
Data Quality
Vendor
CWE — Weakness Type
Clear all
Top 20 matches Showing top matches — use filters or a more specific query to narrow
12 HIGH8 MEDIUM
CVE-2025-25604
MEDIUM CVSS 6.5
Find Similar
Totolink X5000R V9.1.0u.6369_B20230113 is vulnerable to command injection via the vif_disable function in mtkwifi.lua.
totolink
NVD RRF 0.016
CVE-2025-25605
MEDIUM CVSS 6.5
Find Similar
Totolink X5000R V9.1.0u.6369_B20230113 is vulnerable to command injection via the apcli_wps_gen_pincode function in mtkwifi.lua.
totolink
NVD RRF 0.016
CVE-2024-57025
MEDIUM CVSS 6.8
Find Similar
TOTOLINK X5000R V9.1.0cu.2350_B20230313 was discovered to contain an OS command injection vulnerability via the "desc" parameter in setWiFiScheduleCfg.
totolink
NVD RRF 0.016
CVE-2024-57021
HIGH CVSS 8.8
Find Similar
TOTOLINK X5000R V9.1.0cu.2350_B20230313 was discovered to contain an OS command injection vulnerability via the "eHour" parameter in setWiFiScheduleCfg.
totolink
NVD RRF 0.016
CVE-2024-57022
HIGH CVSS 8.8
Find Similar
TOTOLINK X5000R V9.1.0cu.2350_B20230313 was discovered to contain an OS command injection vulnerability via the "sHour" parameter in setWiFiScheduleCfg.
totolink
NVD RRF 0.015
CVE-2024-57024
MEDIUM CVSS 6.8
Find Similar
TOTOLINK X5000R V9.1.0cu.2350_B20230313 was discovered to contain an OS command injection vulnerability via the "eMinute" parameter in setWiFiScheduleCfg.
totolink
NVD RRF 0.015
CVE-2024-57020
HIGH CVSS 8.8
Find Similar
TOTOLINK X5000R V9.1.0cu.2350_B20230313 was discovered to contain an OS command injection vulnerability via the "sMinute" parameter in setWiFiScheduleCfg.
totolink
NVD RRF 0.015
CVE-2024-57023
MEDIUM CVSS 6.8
Find Similar
TOTOLINK X5000R V9.1.0cu.2350_B20230313 was discovered to contain an OS command injection vulnerability via the "week" parameter in setWiFiScheduleCfg.
totolink
NVD RRF 0.015
CVE-2024-57013
HIGH CVSS 8.8
Find Similar
TOTOLINK X5000R V9.1.0cu.2350_B20230313 was discovered to contain an OS command injection vulnerability via the "switch" parameter in setScheduleCfg.
totolink
NVD RRF 0.014
CVE-2024-57017
HIGH CVSS 8.8
Find Similar
TOTOLINK X5000R V9.1.0cu.2350_B20230313 was discovered to contain an OS command injection vulnerability via the "pass" parameter in setVpnAccountCfg.
totolink
NVD RRF 0.014
CVE-2024-57018
HIGH CVSS 8.8
Find Similar
TOTOLINK X5000R V9.1.0cu.2350_B20230313 was discovered to contain an OS command injection vulnerability via the "desc" parameter in setVpnAccountCfg.
totolink
NVD RRF 0.014
CVE-2024-57016
HIGH CVSS 8.8
Find Similar
TOTOLINK X5000R V9.1.0cu.2350_B20230313 was discovered to contain an OS command injection vulnerability via the "user" parameter in setVpnAccountCfg.
totolink
NVD RRF 0.014
CVE-2024-57011
HIGH CVSS 8.8
Find Similar
TOTOLINK X5000R V9.1.0cu.2350_B20230313 was discovered to contain an OS command injection vulnerability via the "minute" parameters in setScheduleCfg.
totolink
NVD RRF 0.014
CVE-2024-57019
HIGH CVSS 8.8
Find Similar
TOTOLINK X5000R V9.1.0cu.2350_B20230313 was discovered to contain an OS command injection vulnerability via the "limit" parameter in setVpnAccountCfg.
totolink
NVD RRF 0.014
CVE-2025-3249
MEDIUM CVSS 5.3
Find Similar
A vulnerability classified as critical was found in TOTOLINK A6000R 1.0.1-B20201211.2000. Affected by this vulnerability is the function apcli_cancel_wps of the file /usr/lib/lua/luci/controller/mtkwi
totolink
NVD RRF 0.013
CVE-2024-41314
MEDIUM CVSS 6.8
Find Similar
TOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection vulnerability via the iface parameter in the vif_disable function.
totolink
NVD RRF 0.013
CVE-2024-57015
HIGH CVSS 8.8
Find Similar
TOTOLINK X5000R V9.1.0cu.2350_B20230313 was discovered to contain an OS command injection vulnerability via the "hour" parameter in setScheduleCfg.
totolink
NVD RRF 0.013
CVE-2024-57014
HIGH CVSS 8.8
Find Similar
TOTOLINK X5000R V9.1.0cu.2350_B20230313 was discovered to contain an OS command injection vulnerability via the "recHour" parameter in setScheduleCfg.
totolink
NVD RRF 0.013
CVE-2024-57211
HIGH CVSS 8.0
Find Similar
TOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection vulnerability via the modifyOne parameter in the enable_wsh function.
totolink
NVD RRF 0.013
Page 1+ Next →