CVE-2025-5507: TOTOLINK A3002RU MAC Filtering Page cross site scripting
A vulnerability was found in TOTOLINK A3002RU 2.1.1-B20230720.1011. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the component MAC Filtering Page. The manipulation of the argument Comment leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-5507?
CVE-2025-5507 has been declared problematic due to its impact on the MAC Filtering Page component.
How does CVE-2025-5507 affect the TOTOLINK A3002RU?
CVE-2025-5507 affects the TOTOLINK A3002RU by allowing cross-site scripting through manipulation of the argument Comment.
What is the risk associated with CVE-2025-5507?
The risk associated with CVE-2025-5507 includes potential exploitation by attackers to execute malicious scripts in the user's browser.
How do I fix CVE-2025-5507?
To fix CVE-2025-5507, it is recommended to update the firmware of the TOTOLINK A3002RU to the latest version.
What specific component of the TOTOLINK A3002RU is vulnerable in CVE-2025-5507?
The vulnerable component in CVE-2025-5507 is the MAC Filtering Page functionality.