Security Advisory

CVE-2025-52284

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2025-07-29 00:00:00
Last updated 2025-09-15 14:48:12
Assigner mitre
State PUBLISHED

Description

Totolink X6000R V9.4.0cu.1360_B20241207 was found to contain a command injection vulnerability in the sub_4184C0 function via the tz parameter. This vulnerability allows unauthenticated attackers to execute arbitrary commands via a crafted request.