CVE-2025-2688
CVSS 3.1 Score 7.6 of 10 (high)
Details
Published Mar 24, 2025
CWE ID 89
Summary
CVE-2025-2688 is a newly disclosed vulnerability affecting TOTOLINK A3000RU routers up to version 5.9c.5185. This issue lies in the unknown functionality of the /cgi-bin/ExportSyslog.sh file within the Syslog Configuration File Handler component. The manipulation results in improper access controls, allowing unauthorized access within the local network. Although the details of the exploit have been made public, it's essential to apply available patches or updates to mitigate the risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.