CVE-2025-8181 TOTOLINK N600R/X2000R FTP Service vsftpd.conf least privilege violation
Remote attackers can exploit a least privilege violation in the FTP service configuration to escalate privileges on TOTOLINK N600R and X2000R routers.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2025-8181?
CVE-2025-8181 is a high-severity vulnerability in TOTOLINK N600R, published on 26 Jul 2025. An attacker needs administrator access to exploit it, with no action from the victim.
Official description
A vulnerability, which was classified as critical, was found in TOTOLINK N600R and X2000R 1.0.0.1. This affects an unknown part of the file vsftpd.conf of the component FTP Service. The manipulation leads to least privilege violation. It is possible to initiate the attack remotely.
Which versions are affected by CVE-2025-8181?
It affects 2 products.
Products include Totolink N600r Firmware, Totolink X2000r Firmware.
How do I fix CVE-2025-8181?
No fix has been published for CVE-2025-8181 yet. Limit exposure of the affected software until one is available.
Is CVE-2025-8181 being exploited?
There is no known exploitation of CVE-2025-8181 in the wild and no public exploit code.
Other vulnerabilities in TOTOLINK N600R
Sources
Also known as GHSA-2j2w-6vxv-4p23.