CVE-2025-5543: fallo de gravedad media en TOTOLINK X2000R
TOTOLINK X2000R Parent Controls Page cross site scripting
Publicada el · Actualizada el
Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.
13Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackcvss 4.8epss 0.3%
A vulnerability was found in TOTOLINK X2000R 1.0.0-B20230726.1108. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the component Parent Controls Page. The manipulation of the argument Device Name leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
Productos afectados
TOTOLINK · X2000RCVEs relacionadas — TOTOLINK X2000R
En el mismo producto, de las más peligrosas a las menos.
CVE-2025-5504MEDIUMTOTOLINK X2000R formWsc command injectionEPSS 14.0%CVE-2025-5515MEDIUMTOTOLINK X2000R formMapDel command injectionEPSS 3.4%CVE-2025-8181HIGHTOTOLINK N600R/X2000R FTP Service vsftpd.conf least privilege violationEPSS 1.1%CVE-2025-5516MEDIUMTOTOLINK X2000R URL Filtering Page formFilter cross site scriptingEPSS 0.4%CVE-2025-5542MEDIUMTOTOLINK X2000R Virtual Server Page formPortFw cross site scriptingEPSS 0.3%CVE-2025-9577LOWTOTOLINK X2000R Administrative shadow.sample default credentialsEPSS 0.2%