CVE-2025-28031
CVSS 3.1 Score 6.5 of 10 (medium)
Details
Published Apr 22, 2025
Updated: Apr 29, 2025
CWE ID 259
Summary
CVE-2025-28031: A vulnerability was identified in TOTOLINK A810R V4.1.2cu.5182_B20201026, where the product.ini file contains a hardcoded telnet password. This issue exposes the device to unauthorized access and potential attacks if the default password is not changed. Attackers can exploit this vulnerability to gain remote access to the device without authentication, leading to potential data breaches and system compromise. It is recommended that users immediately update their devices to the latest firmware version to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Vendors
- TOTOLINK