Vulnerability · Published Dec 10, 2025 · Assigned by certcc
CVE-2025-13184Unauthenticated Telnet enablement via cstecgi.cgi (auth bypass) leading to unauthenticated root login with a blank password
Critical 9.8
In plain English
A critical-severity security flaw in X5000R's (AX1800 router) from Toto Link. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 20.1% (higher than 97% of all known vulnerabilities).
Severity (CVSS 3.1)9.8Critical
Exploit odds (30 days)20.1%top 2.5% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack toolingNoneno public tooling known
Official description
Unauthenticated Telnet enablement via cstecgi.cgi (auth bypass) leading to unauthenticated root login with a blank password on factory/reset X5000R V9.1.0u.6369_B20230113 (arbitrary command execution). Earlier versions that share the same implementation, may also be affected.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Toto Link | X5000R's (AX1800 router) | 0 – before V9.1.0u.6369_B20230113 |