CVE-2025-9577CWE-1392

TOTOLINK X2000R Administrative shadow.sample default credentials

Low · published August 28, 2025

CVSS v4.0
2.0
EPSS
0%
Percentile
11.1
In the wild
Unconfirmed
What it is

A security flaw has been discovered in TOTOLINK X2000R up to 2.0.0. The affected element is an unknown function of the file /etc/shadow.sample of the component Administrative Interface. The manipulation results in use of default credentials. Attacking locally is a requirement. Attacks of this nature are highly complex. The exploitability is described as difficult. The exploit has been released to the public and may be exploited.

The record
Technical detail
CVSS v4.0
2.0 · LOW
Vector
CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P
EPSS
0.00214 · 11.1th percentile
Weakness
CWE-1392 · Use of Default Credentials
Published
2025-08-28T18:32Z
EPSS history
Timeline
  • 28 AUG 18:32Z
    TOTOLINK X2000R Administrative shadow.sample default credentials
    cvelistv5