Unpatched Firmware Flaw Exposes TOTOLINK EX200 to Full Remote Device Takeover

Summary: CERT/CC disclosed CVE-2025-65606, an unpatched flaw in the TOTOLINK EX200 wireless range extender's firmware-upload error handling that can cause the device to start an unauthenticated root-level telnet service. Exploitation requires an attacker already authenticated to the web management interface, and TOTOLINK has released no patch for the product, which is no longer actively maintained and whose firmware was last updated in February 2023.
Key Takeaway: A malformed firmware upload turns this extender into a root telnet service with no authentication required, and there is no vendor fix coming - CERT/CC's only remedies are restricting management access and replacing the device.

Read the original at The Hacker News ↗

Topics: Vulnerabilities & Patching
Mentions: CVE-2025-65606
Related: ⚡ Weekly Recap: AI Automation Exploits, Telecom Espionage, Prompt Poaching & More Cyber Risks ·
Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026
U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026