CVE-2025-8181: TOTOLINK N600R/X2000R FTP Service vsftpd.conf least privilege violation
Published Jul 26, 2025
·Updated
A vulnerability, which was classified as critical, was found in TOTOLINK N600R and X2000R 1.0.0.1. This affects an unknown part of the file vsftpd.conf of the component FTP Service. The manipulation leads to least privilege violation. It is possible to initiate the attack remotely.
Affected Software
6 affected components
TOTOLINK N600R
TOTOLINK X2000R
All of the following
TOTOLINK N600R firmware=4.3.0
TOTOLINK N600R
All of the following
TOTOLINK X2000r Firmware=1.0.0
TOTOLINK X2000R
Event History
Jul 26, 2025
CVE Published
via MITRE·07:02 AM
Data Sourced
via MITRE·07:02 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·07:15 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-8181?
CVE-2025-8181 is classified as critical due to the significant risk of least privilege violation.
2
How do I fix CVE-2025-8181?
To fix CVE-2025-8181, update the firmware of the TOTOLINK N600R and X2000R to the latest version that addresses this vulnerability.
3
What component is affected by CVE-2025-8181?
CVE-2025-8181 affects the FTP Service component, specifically in the vsftpd.conf file.
4
Can CVE-2025-8181 be exploited remotely?
Yes, CVE-2025-8181 can be exploited remotely, allowing unauthorized access if not mitigated.
5
Which devices are impacted by CVE-2025-8181?
CVE-2025-8181 impacts the TOTOLINK N600R and X2000R models.