CVE-2025-5506: TOTOLINK A3002RU NAT Mapping Page cross site scripting
A vulnerability was found in TOTOLINK A3002RU 2.1.1-B20230720.1011. It has been classified as problematic. Affected is an unknown function of the component NAT Mapping Page. The manipulation of the argument Comment leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-5506?
CVE-2025-5506 has been classified as problematic due to its potential for cross-site scripting attacks.
How do I fix CVE-2025-5506?
To mitigate CVE-2025-5506, ensure that your TOTOLINK A3002RU router firmware is updated to the latest version released by the vendor.
What components are affected by CVE-2025-5506?
CVE-2025-5506 affects the NAT Mapping Page of the TOTOLINK A3002RU router.
Are there any known exploits for CVE-2025-5506?
Yes, CVE-2025-5506 can be exploited through manipulation of the Comment parameter, allowing for cross-site scripting.
Who is the vendor for the affected software in CVE-2025-5506?
The vendor for the affected software in CVE-2025-5506 is TOTOLINK.