CVE-2025-6139: TOTOLINK T10 shadow.sample hard-coded password
A vulnerability, which was classified as problematic, has been found in TOTOLINK T10 4.1.8cu.5207. Affected by this issue is some unknown functionality of the file /etc/shadow.sample. The manipulation leads to use of hard-coded password. The attack can only be initiated within the local network. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-6139?
CVE-2025-6139 has been classified as a problematic vulnerability.
How do I fix CVE-2025-6139?
To fix CVE-2025-6139, it is recommended to update the TOTOLINK T10 firmware to the latest version.
What components are affected by CVE-2025-6139?
CVE-2025-6139 affects the /etc/shadow.sample file functionality on the TOTOLINK T10 device.
What type of attack is possible with CVE-2025-6139?
The vulnerability allows an attacker to exploit a hard-coded password under specific conditions.
Is remote access required to exploit CVE-2025-6139?
No, exploitation of CVE-2025-6139 can only be initiated within the local host.