CVE-2025-5504

MediumCVSS 6.3/10Last modified Jun 17, 2026

Description

A vulnerability has been found in TOTOLINK X2000R 1.0.0-B20230726.1108 and classified as critical. This vulnerability affects unknown code of the file /boafrm/formWsc. The manipulation of the argument peerRptPin leads to command injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Metrics

CVSS 3.1 6.3/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Weakness enumeration

CWE-74 CWE-77

Affected software

Vendor	Product	Versions
TOTOLINK	X2000R	1.0.0-B20230726.1108

References

https://github.com/fizz-is-on-the-way/Iot_vuls/blob/main/X2000R/RCE_formWsc/RCE_formWsc.mdExploit, Third Party Advisory
https://vuldb.com/?ctiid.310918Permissions Required, VDB Entry
https://vuldb.com/?id.310918Third Party Advisory, VDB Entry
https://vuldb.com/?submit.584660Third Party Advisory, VDB Entry
https://www.totolink.net/Product

Timeline

Published: Jun 3, 2025
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2025

CVE-2025-550408.8The import form CSRF vulnerability in MuraCMS through 10.1.10 allows attackers to upload and install malicious form definitions through a CS CVE-2025-550418.0MuraCMS through 10.1.10 contains a CSRF vulnerability in the Add To Group functionality for user management (cUsers.cfc addToGroup method) t CVE-2025-550436.5MuraCMS through 10.1.10 contains a CSRF vulnerability in the bundle creation functionality (csettings.cfc createBundle method) that allows u CVE-2025-550448.8The Trash Restore CSRF vulnerability in MuraCMS through 10.1.10 allows attackers to restore deleted content from the trash to unauthorized l CVE-2025-550457.1The update address CSRF vulnerability in MuraCMS through 10.1.10 allows attackers to manipulate user address information through CSRF. The v CVE-2025-550468.1MuraCMS through 10.1.10 contains a CSRF vulnerability that allows attackers to permanently destroy all deleted content stored in the trash s CVE-2025-550478.4CWE-798 Use of Hard-coded Credentials CVE-2025-550489.8Multiple CWE-78 CVE-2025-550499.1Use of Default Cryptographic Key (CWE-1394)CVE-2025-55052.4A vulnerability was found in TOTOLINK A3002RU 2.1.1-B20230720.1011 and classified as problematic. This issue affects some unknown processing CVE-2025-550509.8CWE-1242: Inclusion of Undocumented Features CVE-2025-5505110.0CWE-1392: Use of Default Credentials