CVE-2025-52906

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in TOTOLINK X6000R allows OS Command Injection.This issue affects X6000R: through V9.4.0cu.1360_B20241207.

CVSS v3 9.8 CRITICAL

9.8^/10

CVSS v3 : CRITICAL

Vector :

Exploitability : 3.9 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://github.com/PaloAltoNetworks/u42-vulnerability-disclosures/blob/main/2025/PANW-2025-0002/PANW-2025-0002.md	Third Party Advisory
https://www.totolink.net/home/menu/detail/menu_listtpl/download/id/247/ids/36.html	Product

Configurations

Configuration 1 (hide)

AND

cpe:2.3:o:totolink:x6000r_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:totolink:x6000r:-:*:*:*:*:*:*:*

History

17 Jun 2026, 09:37

Type	Values Removed	Values Added
Summary		(es) La vulnerabilidad de Neutralización Inadecuada de Elementos Especiales utilizados en un Comando de SO ('Inyección de Comandos de SO') en TOTOLINK X6000R permite la inyección de comandos de SO. Este problema afecta a X6000R: hasta V9.4.0cu.1360_B20241207.

14 Oct 2025, 19:45

Type	Values Removed	Values Added
First Time		Totolink x6000r Firmware Totolink Totolink x6000r
References	~~() https://github.com/PaloAltoNetworks/u42-vulnerability-disclosures/blob/main/2025/PANW-2025-0002/PANW-2025-0002.md -~~	() https://github.com/PaloAltoNetworks/u42-vulnerability-disclosures/blob/main/2025/PANW-2025-0002/PANW-2025-0002.md - Third Party Advisory
References	~~() https://www.totolink.net/home/menu/detail/menu_listtpl/download/id/247/ids/36.html -~~	() https://www.totolink.net/home/menu/detail/menu_listtpl/download/id/247/ids/36.html - Product
CPE		cpe:2.3:h:totolink:x6000r:-:::::::* cpe:2.3:o:totolink:x6000r_firmware::::::::
CVSS	v2 : ~~unknown~~ v3 : ~~unknown~~	v2 : unknown v3 : 9.8

24 Sep 2025, 18:15

Type	Values Removed	Values Added
New CVE

Information

Published : 2025-09-24 18:15

Updated : 2026-06-17 09:37

NVD link : CVE-2025-52906

Mitre link : CVE-2025-52906

CVE.ORG link : CVE-2025-52906

JSON object : View

Products Affected

totolink

x6000r
x6000r_firmware

CWE

CWE-78

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

{"id": "CVE-2025-52906", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-52906", "role": "CISA Coordinator", "options": [{"exploitation": "poc"}, {"automatable": "yes"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2025-09-24T18:24:02.935694Z"}}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 3.9}], "cvssMetricV40": [{"type": "Secondary", "source": "psirt@paloaltonetworks.com", "cvssData": {"Safety": "NEGLIGIBLE", "version": "4.0", "Recovery": "USER", "baseScore": 9.3, "Automatable": "YES", "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:H/VA:L/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:N/AU:Y/R:U/V:X/RE:X/U:X", "exploitMaturity": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "userInteraction": "NONE", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "NONE", "subIntegrityImpact": "HIGH", "vulnIntegrityImpact": "HIGH", "integrityRequirement": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "subAvailabilityImpact": "HIGH", "vulnAvailabilityImpact": "LOW", "availabilityRequirement": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "subConfidentialityImpact": "HIGH", "vulnConfidentialityImpact": "LOW", "confidentialityRequirement": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "vulnerabilityResponseEffort": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED"}}]}, "affected": [{"source": "psirt@paloaltonetworks.com", "affectedData": [{"vendor": "TOTOLINK", "product": "X6000R", "versions": [{"status": "affected", "version": "0", "versionType": "cpe", "lessThanOrEqual": "V9.4.0cu.1360_B20241207"}], "defaultStatus": "unaffected"}]}], "published": "2025-09-24T18:15:37.867", "references": [{"url": "https://github.com/PaloAltoNetworks/u42-vulnerability-disclosures/blob/main/2025/PANW-2025-0002/PANW-2025-0002.md", "tags": ["Third Party Advisory"], "source": "psirt@paloaltonetworks.com"}, {"url": "https://www.totolink.net/home/menu/detail/menu_listtpl/download/id/247/ids/36.html", "tags": ["Product"], "source": "psirt@paloaltonetworks.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "psirt@paloaltonetworks.com", "description": [{"lang": "en", "value": "CWE-78"}]}], "descriptions": [{"lang": "en", "value": "Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in TOTOLINK X6000R allows OS Command Injection.This issue affects X6000R: through V9.4.0cu.1360_B20241207."}, {"lang": "es", "value": "La vulnerabilidad de Neutralizaci\u00f3n Inadecuada de Elementos Especiales utilizados en un Comando de SO ('Inyecci\u00f3n de Comandos de SO') en TOTOLINK X6000R permite la inyecci\u00f3n de comandos de SO. Este problema afecta a X6000R: hasta V9.4.0cu.1360_B20241207."}], "lastModified": "2026-06-17T09:37:15.257", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:totolink:x6000r_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5EA8388B-F37E-4FD6-8A23-2D93E101A5DA", "versionEndIncluding": "9.4.0cu.1360_b20241207"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:totolink:x6000r:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "178FD1FA-9A62-48B7-B219-938F48ADD8BB"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "psirt@paloaltonetworks.com"}