CVE-2025-11005: TOTOLINK X6000R Unauthenticated Command Injection Vulnerability
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in TOTOLINK X6000R allows OS Command Injection.This issue affects X6000R: through V9.4.0cu.1458B20250708.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-11005?
CVE-2025-11005 is classified as a critical vulnerability due to its potential for OS command injection.
What devices are affected by CVE-2025-11005?
CVE-2025-11005 affects the TOTOLINK X6000R router versions up to and including V9.4.0cu.1458_B20250708.
How do I fix CVE-2025-11005?
To mitigate CVE-2025-11005, users should update their TOTOLINK X6000R devices to the latest firmware version released by the vendor.
What type of vulnerability is CVE-2025-11005?
CVE-2025-11005 is identified as an OS Command Injection vulnerability due to improper neutralization of special elements.
Can CVE-2025-11005 be exploited remotely?
Yes, CVE-2025-11005 can potentially be exploited remotely, allowing attackers to execute arbitrary OS commands.