CVE-2025-9577Low· 2.5▾ SunlitA security flaw has been discovered in TOTOLINK X2000R up to 2.0.0. The affected element is an unknown function of the file /etc/shadow.sample of the component Administrative Interface. The manipulation results in use of default credenti…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 13.8 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Jul 25.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
0.2%
0.2% → 0.2%
A security flaw has been discovered in TOTOLINK X2000R up to 2.0.0. The affected element is an unknown function of the file /etc/shadow.sample of the component Administrative Interface. The manipulation results in use of default credentials. Attacking locally is a requirement. Attacks of this nature are highly complex. The exploitability is described as difficult. The exploit has been released to the public and may be exploited.
x2000r_firmware = 2.0.0-b20230727.1043.webRefer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-93742Critical· 9.9A weakness has been identified in Totolink A3002MU Hh-B20211125.1046
CVE-2026-93741Critical· 10.0A security flaw has been discovered in Totolink A3002MU Hh-B20211125.1046
CVE-2026-93740Critical· 10.0A vulnerability was identified in Totolink A3002MU Hh-B20211125.1046
CVE-2026-93739Critical· 9.9A vulnerability was determined in Totolink A3002MU Hh-B20211125.1046
CVE-2026-93738Critical· 9.9A vulnerability was found in Totolink A3002MU Hh-B20211125.1046
CVE-2026-91853High· 7.4A vulnerability has been found in TOTOLINK X5000R 9.1.0cu.2089_B20211224