VulnerabilityAnalyzed
CVE-2025-8181
A vulnerability, which was classified as critical, was found in TOTOLINK N600R and X2000R 1.0.0.1.
HIGH 8.6EPSS 0.91%
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (0.91%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
A vulnerability, which was classified as critical, was found in TOTOLINK N600R and X2000R 1.0.0.1. This affects an unknown part of the file vsftpd.conf of the component FTP Service. The manipulation leads to least privilege violation. It is possible to initiate the attack remotely.
- CVSS 4.0
- 8.6 HIGHCVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/M
- EPSS
- 0.91% probability · 58th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-266, CWE-272
- Affected
- totolink/n600r firmware · totolink/x2000r firmware
- Source
- cna@vuldb.com
References
- https://vuldb.com/?ctiid.317595Permissions Required, VDB Entry
- https://vuldb.com/?id.317595Third Party Advisory, VDB Entry
- https://vuldb.com/?submit.621966Third Party Advisory, VDB Entry
- https://vuldb.com/?submit.621968Third Party Advisory, VDB Entry
- https://www.notion.so/23a54a1113e780c08f3acca6a746d732Exploit, Third Party Advisory
- https://www.totolink.net/Product
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.