CVE-2025-52905

TOTOLINK X6000R Argument Injection Vulnerability

CVSS 7 HIGHEPSS 7.8%CWE-20

Improper Input Validation vulnerability in TOTOLINK X6000R allows Flooding.This issue affects X6000R: through V9.4.0cu.1360_B20241207.

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/S:N/AU:Y/R:U

Productos afectados

TOTOLINK · X6000R

¿Quieres saber si tu infraestructura está expuesta a esto?

Hablar con TrueHacking →

Referencias

https://github.com/PaloAltoNetworks/u42-vulnerability-disclosures/blob/main/2025/PANW-2025-0001/PANW-2025-0001.md https://www.totolink.net/home/menu/detail/menu_listtpl/download/id/247/ids/36.html