CVE-2025-2955

🗓️ 30 Mar 2025 17:31:06Reported by VulDBType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 54 Views

Vulnerability in TOTOLINK A3000RU allows remote access to configuration file with improper controls.

Reporter	Title	Published	Views	Family All 10
Circl	CVE-2025-2955	30 Mar 202523:06	–	circl
CNNVD	TOTOLINK A3000RU 安全漏洞	30 Mar 202500:00	–	cnnvd
CNVD	TOTOLINK A3000RU Access Control Error Vulnerability	3 Apr 202500:00	–	cnvd
Cvelist	CVE-2025-2955 TOTOLINK A3000RU IBMS Configuration File ExportIbmsConfig.sh access control	30 Mar 202517:31	–	cvelist
EUVD	EUVD-2025-8682	3 Oct 202520:07	–	euvd
NVD	CVE-2025-2955	30 Mar 202518:15	–	nvd
OSV	CVE-2025-2955	30 Mar 202518:15	–	osv
Positive Technologies	PT-2025-13627 · Totolink · Totolink A3000Ru	30 Mar 202500:00	–	ptsecurity
RedhatCVE	CVE-2025-2955	1 Apr 202518:28	–	redhatcve
Vulnrichment	CVE-2025-2955 TOTOLINK A3000RU IBMS Configuration File ExportIbmsConfig.sh access control	30 Mar 202517:31	–	vulnrichment

NVD

Node

totolink a3000ru_firmwareRange≤5.9c.5185

AND

totolink a3000ruMatch-

[
  {
    "vendor": "TOTOLINK",
    "product": "A3000RU",
    "versions": [
      {
        "version": "5.9c.5185",
        "status": "affected"
      }
    ],
    "modules": [
      "IBMS Configuration File Handler"
    ]
  }
]

Source	Link
totolink	www.totolink.net/
vuldb	www.vuldb.com/
vuldb	www.vuldb.com/
vuldb	www.vuldb.com/
lavender-bicycle-a5a	www.lavender-bicycle-a5a.notion.site/TOTOLINK-A3000RU-ExportIbmsConfig-1b953a41781f80b89397e8c34717eb94

02 Jul 2025 18:04Current

7.3High risk

Vulners AI Score7.3

CVSS 25

CVSS 3.15.3

CVSS 46.9

CVSS 35.3

EPSS0.00234

SSVC