CVE-2025-9577: totolink x2000r_firmware Use of Default Credentials

Vulnerability summary

CVE-2025-9577 is a high (CVSS 7.0) Use of Default Credentials vulnerability in totolink x2000r_firmware. EPSS estimates a 0.21% chance of exploitation in the next 30 days, higher than 11% of scored vulnerabilities. 1 public exploit is recorded.

Timeline

1. 28-08-2025
   PublishedVulnerability first disclosed.
2. 28-08-2025
   Last modifiedVulnerability information updated.

Description

A security flaw has been discovered in TOTOLINK X2000R up to 2.0.0. The affected element is an unknown function of the file /etc/shadow.sample of the component Administrative Interface. The manipulation results in use of default credentials. Attacking locally is a requirement. Attacks of this nature are highly complex. The exploitability is described as difficult. The exploit has been released to the public and may be exploited.

• CWE-1392Use of Default CredentialsThe product uses default credentials (such as passwords or cryptographic keys) for potentially critical functionality.