CVE-2025-8181

Katalog CVE

CVSS 7.2 · High EPSS 0,95%

Kerentanan Incorrect Privilege Assignment pada totolink n600r firmware, totolink x2000r firmware. Skor CVSS 3.1 7.2 (High) menurut vuldb.com.

Deskripsi (NVD)

A vulnerability, which was classified as critical, was found in TOTOLINK N600R and X2000R 1.0.0.1. This affects an unknown part of the file vsftpd.conf of the component FTP Service. The manipulation leads to least privilege violation. It is possible to initiate the attack remotely.

Rincian

Terbit di NVD

26 Juli 2025

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

7.2 (High), sumber vuldb.com
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-266: Incorrect Privilege Assignment
CWE-272: Least Privilege Violation

EPSS (30 hari)

0,95% peluang dieksploitasi; lebih tinggi dari 60,2% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://vuldb.com/?id.317595 advisory pihak ketiga · vdb entry
• https://vuldb.com/?submit.621966 advisory pihak ketiga · vdb entry
• https://vuldb.com/?submit.621968 advisory pihak ketiga · vdb entry
• https://www.notion.so/23a54a1113e780c08f3acca6a746d732 exploit · advisory pihak ketiga
• https://vuldb.com/?ctiid.317595 permissions required · vdb entry
• https://www.totolink.net/ product