CVE-2025-25605 | TOTOLINK X5000R 9.1.0u.6369_B20230113 mtkwifi.lua apcli_wps_gen_pincode command injection

CVE-2025-25605 | TOTOLINK X5000R 9.1.0u.6369_B20230113 mtkwifi.lua apcli_wps_gen_pincode command injection

A vulnerability was found in TOTOLINK X5000R 9.1.0u.6369_B20230113. It has been classified as critical. This affects the function apcli_wps_gen_pincode of the file mtkwifi.lua. The manipulation leads to command injection. This vulnerability is uniquely identified as CVE-2025-25605. The attack can only be initiated within the local network. There is no exploit available.