CVE-2025-5543: TOTOLINK X2000R Parent Controls Page cross site scripting
A vulnerability was found in TOTOLINK X2000R 1.0.0-B20230726.1108. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the component Parent Controls Page. The manipulation of the argument Device Name leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-5543?
CVE-2025-5543 has been declared as problematic due to its potential for cross-site scripting.
How do I fix CVE-2025-5543?
To fix CVE-2025-5543, update the TOTOLINK X2000R to the latest firmware version provided by the vendor.
What components are affected by CVE-2025-5543?
CVE-2025-5543 affects the Parent Controls Page of the TOTOLINK X2000R router.
What type of attack can CVE-2025-5543 facilitate?
CVE-2025-5543 facilitates cross-site scripting attacks due to improper handling of the Device Name argument.
Is CVE-2025-5543 remote exploitative?
Yes, CVE-2025-5543 can be exploited remotely, making it a significant security concern for users.