Vulnerability Details CVE-2025-61044
TOTOLINK X18 V9.1.0cu.2053_B20230309 was discovered to contain a command injection vulnerability via the agentName parameter in the setEasyMeshAgentCfg function.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.004
EPSS Ranking 61.7%
CVSS Severity
CVSS v3 Score 9.8
Products affected by CVE-2025-61044
-
cpe:2.3:h:totolink:x18:-
-
cpe:2.3:o:totolink:x18_firmware:9.1.0cu.2053_b20230309