Skip to content
CVE PROGRAM SOURCE RECORD9.8 Critical

CVE-2025-13184

Unauthenticated Telnet enablement via cstecgi.cgi (auth bypass) leading to unauthenticated root login with a blank password

Description

Unauthenticated Telnet enablement via cstecgi.cgi (auth bypass) leading to unauthenticated root login with a blank password on factory/reset X5000R V9.1.0u.6369_B20230113 (arbitrary command execution). Earlier versions that share the same implementation, may also be affected.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Toto Link X5000R's (AX1800 router)

  • 0 to < V9.1.0u.6369_B20230113affected

References