Approved changes feed: RSS · Atom

cpe:2.3:o:totolink:x2000r_firmware:2.0.0-b20230727.1043.web:*:*:*:*:*:*:*

part: o version: 2.0.0-b20230727.1043.web update: *

VendorTotolink (fa0129e6-aa24-5784-be77-22d8becdb79b)
ProductX2000R Firmware (2f4104dc-bdcf-5c93-bb35-35b131eb6cf3)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-9577 vulnerable 2026-06-08 07:45:22.728635 TOTOLINK X2000R Administrative shadow.sample default credentials
LOW (2.5)
A security flaw has been discovered in TOTOLINK X2000R up to 2.0.0. The affected element is an unknown function of the file /etc/shadow.sample of the component Administrative Interface. The manipulation results in use of default credentials. Attacking locally is a requirement. Attacks of this nature are highly complex. The exploitability is described as difficult. The exploit has been released to the public and may be exploited.
Published: 2025-08-28T18:32:07.573Z
Updated: 2025-08-28T18:41:04.929Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-57579 vulnerable 2026-06-08 07:33:15.955241 Details available
An issue in TOTOLINK Wi-Fi 6 Router Series Device X2000R-Gh-V2.0.0 allows a remote attacker to execute arbitrary code via the default password
Published: 2025-09-12T00:00:00.000Z
Updated: 2025-09-12T16:02:11.995Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.