CVE-2025-4271
Last modified
CVE-2025-4271 is a medium-severity vulnerability rated 6.9/10 on the CVSS scale. A vulnerability was found in TOTOLINK A720R 4.1.5cu.374. It has been declared as problematic. EPSS estimates a 0.53% chance of exploitation in the next 30 days.
Description
A vulnerability was found in TOTOLINK A720R 4.1.5cu.374. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument topicurl with the input showSyslog leads to information disclosure. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Totolink | A720r Firmware | 4.1.5cu.374 |
References
- https://vuldb.com/?ctiid.307375Permissions Required, VDB Entry
- https://vuldb.com/?id.307375Third Party Advisory, VDB Entry
- https://vuldb.com/?submit.563444Third Party Advisory, VDB Entry
- https://www.totolink.net/Product
Timeline
- Published
- Last Modified
- Status
- Analyzed
Frequently Asked Questions
What is CVE-2025-4271?
How severe is CVE-2025-4271?
How do I fix CVE-2025-4271?
How Strix Helps
- Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2025
- CVE-2025-4267A vulnerability, which was classified as critical, was found…7.2
- CVE-2025-4268A vulnerability has been found in TOTOLINK A720R 4.1.5cu.374…6.9
- CVE-2025-4269A vulnerability was found in TOTOLINK A720R 4.1.5cu.374 and …5.3
- CVE-2025-4270A vulnerability was found in TOTOLINK A720R 4.1.5cu.374. It …7.5
- CVE-2025-42701A race condition exists in the Falcon sensor for Windows tha…5.6
- CVE-2025-42706A logic error exists in the Falcon sensor for Windows that c…6.5
- CVE-2025-4272A vulnerability was found in Mechrevo Control Console 1.0.2.…7.3
- CVE-2025-4273Rejected reason: This CVE ID has been rejected or withdrawn …
- CVE-2025-4275A vulnerability in the digital signature verification proces…7.8
- CVE-2025-4276UsbCoreDxe has a vulnerability which can be used to write ar…7.5
- CVE-2025-4277Tcg2Smm has a vulnerability which can be used to write arbit…7.5
- CVE-2025-4278An issue has been discovered in GitLab CE/EE affecting all v…8.7
Are you affected by CVE-2025-4271?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST