CVE-2025-5542 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

A vulnerability was found in TOTOLINK X2000R 1.0.0-B20230726.1108. It has been classified as problematic. Affected is an unknown function of the file /boafrm/fo…
Medium CVSS: 4.8

CVE-2025-5542

A vulnerability was found in TOTOLINK X2000R 1.0.0-B20230726.1108. It has been classified as problematic. Affected is an unknown function of the file /boafrm/formPortFw of the component Virtual Server Page. The manipulation of the argument service_type leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Vendor
Totolink
Product
X2000r Firmware
CWE
CWE-79
Yayın Tarihi
2025-06-03 22:15:21
Güncelleme
2025-06-06 18:47:37
Source Identifier
cna@vuldb.com
KEV Date Added
-

Kategoriler

CWE-79 X2000r Firmware MEDIUM Totolink 2025

Referanslar

https://github.com/fizz-is-on-the-way/Iot_vuls/tree/main/X2000R/XSS_Virtual_Server https://vuldb.com/?ctiid.310992 https://vuldb.com/?id.310992 https://vuldb.com/?submit.585726 https://www.totolink.net/ https://github.com/fizz-is-on-the-way/Iot_vuls/tree/main/X2000R/XSS_Virtual_Server