← All advisories

Medium severity6.5NVD Advisory· Published Feb 21, 2025· Updated Jun 17, 2026

CVE-2025-25605

CVE-2025-25605

Description

Totolink X5000R V9.1.0u.6369_B20230113 is vulnerable to command injection via the apcli_wps_gen_pincode function in mtkwifi.lua.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Totolink/X5000r Firmware
cpe:2.3:o:totolink:x5000r_firmware:9.1.0u.6369_b20230113:*:*:*:*:*:*:*
Totolink/X5000Rcpe-rescue2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: = V9.1.0u.6369_B20230113

Patches

Vulnerability mechanics

References

1

github.com/sezangel/IOT-vul/tree/main/Totolink/X5000R/4nvdExploit

News mentions

0

No linked articles in our index yet.