PT-2025-23638 · Totolink · Totolink A3002Ru

Lcyf-Fizz · Published 2025-05-26 · Updated 2025-06-06 · CVE-2025-5508

Positive Technologies (AI Summary)

CVSS v2.0

4.0

Medium

Base vector

AV:N/AC:L/Au:S/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions TOTOLINK A3002RU version 2.1.1-B20230720.1011

Description The issue is related to the IP/Port Filtering module of the TOTOLINK A3002RU router's firmware, where the Comment parameter is not properly protected, leading to cross-site scripting (XSS) attacks. This can be exploited remotely. The vendor was contacted about the disclosure but did not respond.

Recommendations As a temporary workaround, consider disabling the IP Port Filtering Page until a patch is available. Restrict access to the IP Port Filtering Page to minimize the risk of exploitation. Avoid using the Comment argument in the affected page until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

XSS

Code Injection

Weakness Enumeration

CWE-79

CWE-94

Related Identifiers

BDU:2025-06470

CVE-2025-5508

Affected Products

Totolink A3002Ru

References · 12

• 🔥 https://github.com/fizz-is-on-the-way/Iot_vuls/tree/main/A3002RU_V2/XSS_IP_Port_Filtering · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-5508 · Security Note
• https://bdu.fstec.ru/vul/2025-06470 · Security Note
• https://osv.dev/vulnerability/CVE-2025-5508 · Vendor Advisory
• https://t.me/cvenotify/124921 · Telegram Post
• https://vuldb.com/?id.310922 · Note
• https://t.me/cvetracker/25294 · Telegram Post
• https://vuldb.com/?ctiid.310922 · Note
• https://twitter.com/VulmonFeeds/status/1929985730664640758 · Twitter Post
• https://totolink.net · Note
• https://twitter.com/CVEnew/status/1929944070127788219 · Twitter Post
• https://vuldb.com/?submit.584671 · Note