CVE-2025-57579

CWE-798 — Hard-coded Credentials3 documents3 sources
Severity
8.0HIGH
EPSS
0.3%
top 45.76%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Totolink X2000r Firmware
Timeline
PublishedSep 12

Description

An issue in TOTOLINK Wi-Fi 6 Router Series Device X2000R-Gh-V2.0.0 allows a remote attacker to execute arbitrary code via the default password

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:HExploitability: 2.1 | Impact: 5.9

Affected Packages1 packages

▶NVDtotolink/x2000r_firmware2.0.0-b20230727.1043.web

🔴Vulnerability Details

2
GHSA
GHSA-fv6j-75mv-78gq: An issue in TOTOLINK Wi-Fi 6 Router Series Device X2000R-Gh-V2↗2025-09-12
▶
CVEList
CVE-2025-57579: An issue in TOTOLINK Wi-Fi 6 Router Series Device X2000R-Gh-V2↗2025-09-12
▶
CVE-2025-57579 (HIGH CVSS 8) | An issue in TOTOLINK Wi-Fi 6 Router | cvebase.io