Vulnerability Description
A vulnerability, which was classified as critical, was found in TOTOLINK N600R and X2000R 1.0.0.1. This affects an unknown part of the file vsftpd.conf of the component FTP Service. The manipulation leads to least privilege violation. It is possible to initiate the attack remotely.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Totolink | N600R Firmware | 4.3.0 |
| Totolink | N600R | - |
| Totolink | X2000R Firmware | 1.0.0 |
| Totolink | X2000R | - |
Related Weaknesses (CWE)
References
- https://vuldb.com/?ctiid.317595Permissions RequiredVDB Entry
- https://vuldb.com/?id.317595Third Party AdvisoryVDB Entry
- https://vuldb.com/?submit.621966Third Party AdvisoryVDB Entry
- https://vuldb.com/?submit.621968Third Party AdvisoryVDB Entry
- https://www.notion.so/23a54a1113e780c08f3acca6a746d732ExploitThird Party Advisory
- https://www.totolink.net/Product
FAQ
What is CVE-2025-8181?
CVE-2025-8181 is a vulnerability with a CVSS score of 7.2 (HIGH). A vulnerability, which was classified as critical, was found in TOTOLINK N600R and X2000R 1.0.0.1. This affects an unknown part of the file vsftpd.conf of the component FTP Service. The manipulation l...
How severe is CVE-2025-8181?
CVE-2025-8181 has been rated HIGH with a CVSS base score of 7.2/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2025-8181?
Check the references section above for vendor advisories and patch information. Affected products include: Totolink N600R Firmware, Totolink N600R, Totolink X2000R Firmware, Totolink X2000R.