PT-2025-35127 · Totolink · Totolink X2000R

Lxyilu · Published 2025-08-28 · Updated 2025-12-23 · CVE-2025-9577

Positive Technologies (AI Summary)

CVSS v3.1

7.0

High

Base vector

AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions TOTOLINK X2000R versions through 2.0.0

Description A security flaw has been discovered that allows for the use of default credentials. The affected element is an unknown function within the /etc/shadow.sample file of the Administrative Interface component. Local access is required for exploitation, which is described as difficult. The exploit has been released publicly and may be exploited.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-1392

Related Identifiers

BDU:2025-10699

CVE-2025-9577

Affected Products

Totolink X2000R

References · 11

• 🔥 https://github.com/XXRicardo/iot-cve/blob/main/TOLOLINK/X2000R-Gh-V2.0.0.md#steps-to-reproduce · Exploit
• 🔥 https://github.com/XXRicardo/iot-cve/blob/main/TOLOLINK/X2000R-Gh-V2.0.0.md · Exploit
• https://osv.dev/vulnerability/CVE-2025-9577 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-10699 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-9577 · Security Note
• https://t.me/CVEtracker/31160 · Telegram Post
• https://totolink.net · Note
• https://vuldb.com/?ctiid.321691 · Note
• https://twitter.com/CVEnew/status/2003567372309864516 · Twitter Post
• https://vuldb.com/?submit.636069 · Note
• https://vuldb.com/?id.321691 · Note