What’s Vulnerable › Vulnerabilities

CVE-2025-8181: TOTOLINK N600R/X2000R FTP Service vsftpd.conf least privilege violation

• Severity: high (CVSS 7.2 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.0% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2025-07-26 · updated 2026-06-17
• Weakness: CWE-266

Description

A vulnerability, which was classified as critical, was found in TOTOLINK N600R and X2000R 1.0.0.1. This affects an unknown part of the file vsftpd.conf of the component FTP Service. The manipulation leads to least privilege violation. It is possible to initiate the attack remotely.

Affected products

• TOTOLINK N600R: 4.3.0
• TOTOLINK X2000R: 1.0.0

References

• https://vuldb.com/?ctiid.317595
• https://vuldb.com/?id.317595
• https://vuldb.com/?submit.621966
• https://vuldb.com/?submit.621968
• https://www.notion.so/23a54a1113e780c08f3acca6a746d732
• https://www.totolink.net/

Get alerted when CVE-2025-8181 or the next vulnerability affects your stack