CVE-2025-1829 — Command Injection in X18

CWE-77 — Command InjectionCWE-78 — OS Command InjectionCWE-772 — Missing Release of Resource after Effective LifetimeCWE-416 — Use After Free6 documents6 sources
Severity
5.3MEDIUMNVD
EPSS
0.8%
top 25.52%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Totolink X18Totolink X18 Firmware
Timeline
PublishedMar 2
Latest updateOct 1

Description

A vulnerability was found in TOTOLINK X18 9.1.0cu.2024_B20220329. It has been declared as critical. This vulnerability affects the function setMtknatCfg of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument mtkhnatEnable leads to os command injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N

Affected Packages2 packages

▶CVEListV5totolink/x189.1.0cu.2024_B20220329
▶NVDtotolink/x18_firmware9.1.0cu.2024_b20220329

🔴Vulnerability Details

3
CVEList
TOTOLINK X18 cstecgi.cgi setMtknatCfg os command injection↗2025-03-02
▶
GHSA
GHSA-mwjq-q4w6-76fx: A vulnerability was found in TOTOLINK X18 9↗2025-03-02
▶
VulnCheck
totolink x18_firmware Improper Neutralization of Special Elements used in a Command ('Command Injection')↗2025
▶

📋Vendor Advisories

2
Red Hat
kernel: i40e: fix IRQ freeing in i40e_vsi_request_irq_msix error path↗2025-10-01
▶
Microsoft
Use-after-free in tcindex (traffic control index filter) in the Linux Kernel↗2023-04-11
▶
CVE-2025-1829 — Command Injection in Totolink X18 | cvebase