CVE-2025-5542: Totolink x2000r Firmware

Medium severity, CVSS 4.8. EPSS: 0.3% chance of exploitation in the next 30 days.

A vulnerability was found in TOTOLINK X2000R 1.0.0-B20230726.1108. It has been classified as problematic. Affected is an unknown function of the file /boafrm/formPortFw of the component Virtual Server Page. The manipulation of the argument service_type leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.

Affected products

• Totolink x2000r Firmware: version 1.0.0-b20230726.1108 only

Published 2025-06-03. Last modified 2026-06-17.