CVE-2025-52905: TOTOLINK X6000R Argument Injection Vulnerability
Published Sep 23, 2025
·Updated
Improper Input Validation vulnerability in TOTOLINK X6000R allows Flooding.This issue affects X6000R: through V9.4.0cu.1360B20241207.
Affected Software
3 affected components
TOTOLINK X6000R<=V9.4.0cu.1360_B20241207
All of the following
TOTOLINK X6000R Firmware<=9.4.0cu.1360_b20241207
TOTOLINK X6000R
Event History
Sep 23, 2025
CVE Published
via MITRE·05:53 PM
Data Sourced
via MITRE·05:53 PM
DescriptionWeakness
Data Sourced
via NVD·06:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-52905?
The severity of CVE-2025-52905 is categorized as high due to its potential for flooding attacks.
2
How do I fix CVE-2025-52905?
To fix CVE-2025-52905, update the TOTOLINK X6000R firmware to a version higher than V9.4.0cu.1360_B20241207.
3
What systems are affected by CVE-2025-52905?
CVE-2025-52905 affects the TOTOLINK X6000R router with firmware versions up to and including V9.4.0cu.1360_B20241207.
4
What is the nature of the vulnerability in CVE-2025-52905?
CVE-2025-52905 is an Improper Input Validation vulnerability that allows for network flooding.
5
Is there a workaround for CVE-2025-52905?
Currently, there is no official workaround for CVE-2025-52905; the only mitigation is to upgrade the firmware.