CVE-2025-52905

EUVD-2025-30903
Improper Input Validation vulnerability in TOTOLINK X6000R allows Flooding.This issue affects X6000R: through V9.4.0cu.1360_B20241207.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.5 HIGH
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 38%
Affected Products (NVD)
VendorProductVersion
totolinkx6000r_firmware
𝑥
≤ 9.4.0cu.1360_b20241207
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://github.com/PaloAltoNetworks/u42-vulnerability-disclosures/blob/main/2025/PANW-2025-0001/PANW-2025-0001.md
https://www.totolink.net/home/menu/detail/menu_listtpl/download/id/247/ids/36.html