PT-2025-12563 · Totolink · Totolink A3000Ru

Wxhwxhwxh_Mie · Published 2025-03-17 · Updated 2025-07-02 · CVE-2025-2688

Positive Technologies (AI Summary)

CVSS v4.0

5.3

Medium

Base vector

AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Name of the Vulnerable Software and Affected Versions TOTOLINK A3000RU versions up to 5.9c.5185

Description A problematic issue was found in the Syslog Configuration File Handler component, specifically in the file /cgi-bin/ExportSyslog.sh. This issue leads to improper access controls. The attack must be carried out within the local network.

Recommendations For TOTOLINK A3000RU versions up to 5.9c.5185, consider restricting access to the /cgi-bin/ExportSyslog.sh file until a patch is available. As a temporary workaround, limit the ability to manipulate the unknown functionality of the Syslog Configuration File Handler component to minimize the risk of exploitation.

Exploit

Fix

Improper Access Control

Incorrect Privilege Assignment

Weakness Enumeration

CWE-284

CWE-266

CWE-264

Related Identifiers

BDU:2025-05843

CVE-2025-2688

Affected Products

Totolink A3000Ru

References · 13

• 🔥 https://lavender-bicycle-a5a.notion.site/TOTOLINK-A3000RU-ExportSyslog-1b953a41781f8064970dc7809a52ac6c?pvs=4 · Exploit
• https://osv.dev/vulnerability/CVE-2025-2688 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-2688 · Security Note
• https://bdu.fstec.ru/vul/2025-05843 · Security Note
• https://t.me/cvetracker/19746 · Telegram Post
• https://vuldb.com/?submit.521570 · Note
• https://totolink.net · Note
• https://t.me/cvenotify/127465 · Telegram Post
• https://t.me/cvenotify/115872 · Telegram Post
• https://vuldb.com/?ctiid.300709 · Note
• https://t.me/cvedetector/20947 · Telegram Post
• https://twitter.com/CVEnew/status/1904062578986303738 · Twitter Post
• https://vuldb.com/?id.300709 · Note