Approved changes feed: RSS · Atom

cpe:2.3:o:totolink:a950rg_firmware:5.9:*:*:*:*:*:*:*

part: o version: 5.9 update: *

VendorTotolink (fa0129e6-aa24-5784-be77-22d8becdb79b)
ProductA950Rg Firmware (8c0ae15f-0aba-5e14-bb3d-37dbb11132b7)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-44655 vulnerable 2026-06-08 07:25:10.715027 Details available
In TOTOLink A7100RU V7.4, A950RG V5.9, and T10 V5.9, the chroot_local_user option is enabled in the vsftpd.conf. This could lead to unauthorized access to system files, privilege escalation, or use of the compromised server as a pivot point for internal network attacks.
Published: 2025-07-21T00:00:00.000Z
Updated: 2026-07-05T01:02:17.997Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.