Product:
X6000R
Summary
Improper Input Validation vulnerability in TOTOLINK X6000R allows Flooding. This issue affects X6000R through V9.4.0cu.1360_B20241207. The vulnerability can lead to significant disruptions in service availability.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 7 | CVE-2025-52905 |
Exploitation
To exploit this vulnerability, an attacker can send specially crafted input to the affected device over the network. This input can trigger the improper validation mechanism, allowing the attacker to flood the device, potentially leading to denial of service. The attack does not require any special privileges, making it easier for unauthorized users to exploit.
Affected Products
- X6000R: Affected from version V9.4.0cu.1360_B20241207 and onwards, this product is vulnerable to flooding attacks due to improper input validation.
Mitigation
To mitigate this vulnerability, users should update their TOTOLINK X6000R devices to the latest firmware version that addresses the improper input validation issue. Regularly checking for firmware updates and applying them promptly can help protect against potential exploitation.