CVE-2025-1829

MEDIUM EXPLOITED

TOTOLINK X18 9.1.0cu.2024_B20220329 - Code Injection

Title source: llm
STIX 2.1

Exploitation Summary

CVE-2025-1829 has been observed exploited in the wild (reported by VulnCheck KEV).

Description

A vulnerability was found in TOTOLINK X18 9.1.0cu.2024_B20220329. It has been declared as critical. This vulnerability affects the function setMtknatCfg of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument mtkhnatEnable leads to os command injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

References (5)

Core 5
Core References
Product product
https://www.totolink.net/
Third Party Advisory, VDB Entry vdb-entry technical-description
https://vuldb.com/?id.298096
Permissions Required, VDB Entry signature permissions-required
https://vuldb.com/?ctiid.298096
Third Party Advisory, VDB Entry third-party-advisory
https://vuldb.com/?submit.504983

Scores

CVSS v3 6.3
EPSS 0.0082
EPSS Percentile 74.7%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

CISA SSVC

Vulnrichment
Exploitation poc
Automatable no
Technical Impact partial

Details

VulnCheck KEV 2025-10-09
CWE
CWE-78 CWE-77
Status published
Products (1)
totolink/x18_firmware 9.1.0cu.2024_b20220329
Published Mar 02, 2025
Tracked Since Feb 18, 2026