CVE-2025-9577
LowCVSS 2.5Exploitation Probability (EPSS)
Low risk9th percentile - higher than 9% of all known CVEs
Summary
A security flaw has been discovered in TOTOLINK X2000R up to 2.0.0 in the Administrative Interface component, where manipulation of the file /etc/shadow.sample results in use of default credentials. Attacking locally is a requirement and the attack is highly complex. The exploit has been released to the public and may be exploited.
Risk Assessment
Use of default credentials may allow an attacker to gain unauthorized access to the device, potentially leading to router compromise and further network attacks.
Recommendation
Update TOTOLINK X2000R to a version later than 2.0.0 that includes the fix, and change default credentials to strong, unique passwords.
Original NVD description (English source)
A security flaw has been discovered in TOTOLINK X2000R up to 2.0.0. The affected element is an unknown function of the file /etc/shadow.sample of the component Administrative Interface. The manipulation results in use of default credentials. Attacking locally is a requirement. Attacks of this nature are highly complex. The exploitability is described as difficult. The exploit has been released to the public and may be exploited.