Skip to content
COOEY

EXPOSURES › CVE-2025-51452

CVE-2025-51452

CRITICAL
DETAIL
SourceNVD · cve Published2025-08-13 CVSS9.8 Referencehttps://nvd.nist.gov/vuln/detail/CVE-2025-51452 ↗
SHAME 35/100

In TOTOLINK A7000R firmware 9.1.0u.6115_B20201022, an attacker can bypass login by sending a specific request through formLoginAuth.htm.

▸ RECOMMENDED ACTION  Critical severity — schedule patching of the affected products.

PLAYERS IMPLICATED
totolink · vendora7000r · producta7000r firmware · product
DESCRIPTION

In TOTOLINK A7000R firmware 9.1.0u.6115_B20201022, an attacker can bypass login by sending a specific request through formLoginAuth.htm.

AFFECTED FEDRAMP PRODUCTS · 0
No correlated FedRAMP products.