CVE-2025-52907 HIGH

CVE-2025-52907: TOTOLINK X6000R Security Bypass Vulnerability

Vendor Totolink
Product X6000R
Weakness CWE-20 · Input validation
Published September 24, 2025
Last update September 24, 2025
View on NVD All CVEs

CVSS base score

7.3/10
Attack vector Network
Attack complexity High
Privileges required None
User interaction —
Confidentiality —
Integrity —

CVSS vector

CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:A/VC:L/VI:H/VA:L/SC:H/SI:H/SA:H/R:U

What the vulnerability does

01Description

Improper Input Validation vulnerability in TOTOLINK X6000R allows Command Injection, File Manipulation.This issue affects X6000R: through V9.4.0cu.1360_B20241207.

Key dates

02Disclosure timeline

September 24, 2025 CVE published
September 24, 2025 Record updated