CVE-2025-29064

Summary

CVE-2025-29064 is a newly identified vulnerability affecting TOTOLINK x18 routers running version v.9.1.0cu.2024_B20220329. This issue permits a remote attacker to exploit the sub_410E54 function present in the cstecgi.cgi file, ultimately granting unauthorized arbitrary code execution. Successful exploitation of this vulnerability could lead to serious security implications, such as unauthorized access, data theft, or network disruption. It is essential for affected users to promptly update their routers to the latest available version to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.