CVE-2021-45738: Totolink x5000r Firmware

Critical severity, CVSS 9.8. EPSS: 4.4% chance of exploitation in the next 30 days.

TOTOLINK X5000R v9.1.0u.6118_B20201102 was discovered to contain a command injection vulnerability in the function UploadFirmwareFile. This vulnerability allows attackers to execute arbitrary commands via the parameter FileName.

Affected products

• Totolink x5000r Firmware: version 9.1.0u.6118_b20201102 only

Published 2022-02-04. Last modified 2026-06-17.