TOTOLINK X5000R v9.1.0cu.2350_B20230313 was discovered to contain a command injection via the disconnectVPN function.
CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')