CVE-2023-30013: Totolink x5000r Firmware

Critical severity, CVSS 9.8. EPSS: 25.9% chance of exploitation in the next 30 days.

TOTOLINK X5000R V9.1.0u.6118_B20201102 and V9.1.0u.6369_B20230113 contain a command insertion vulnerability in setting/setTracerouteCfg. This vulnerability allows an attacker to execute arbitrary commands through the "command" parameter.

Affected products

• Totolink x5000r Firmware: version 9.1.0u.6118_b20201102 only; version 9.1.0u.6369_b20230113 only

Published 2023-05-05. Last modified 2026-06-17.