Vulnerability · Published Dec 13, 2025 · Assigned by VulDB
CVE-2025-14586TOTOLINK X5000R cstecgi.cgi snprintf os command injection
Medium 6.3
In plain English
A medium-severity OS command injection in X5000R from TOTOLINK. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 2.8% (higher than 86% of all known vulnerabilities).
Severity (CVSS 3.1)6.3Medium
Exploit odds (30 days)2.8%top 13.7% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack toolingNoneno public tooling known
Official description
A vulnerability was determined in TOTOLINK X5000R 9.1.0cu.2089_B20211224. Affected by this issue is the function snprintf of the file /cgi-bin/cstecgi.cgi?action=exportOvpn&type=user. This manipulation of the argument User causes os command injection. Remote exploitation of the attack is possible. The exploit has been publicly disclosed and may be utilized.
Affected products (as reported)
Weakness: CWE-78, CWE-77 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R
References
- VDB-336206 | TOTOLINK X5000R cstecgi.cgi snprintf os command injection vdb-entry, technical-description
- VDB-336206 | CTI Indicators (IOB, IOC, TTP, IOA) signature, permissions-required
- Submit #705593 | TOTOLINK X5000R v9.1.0cu.2089_B20211224 RCE third-party-advisory
- https://github.com/awigwu76/TOTOLINK_X5000R/blob/main/1.md exploit
- https://www.totolink.net/ broken-link, product