Unrated severityNVD Advisory· Published Jul 21, 2025· Updated Jul 22, 2025
CVE-2025-44655
CVE-2025-44655
Description
In TOTOLink A7100RU V7.4, A950RG V5.9, and T10 V5.9, the chroot_local_user option is enabled in the vsftpd.conf. This could lead to unauthorized access to system files, privilege escalation, or use of the compromised server as a pivot point for internal network attacks.
Affected products
4- TOTOLink/A7100RUdescription
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
2News mentions
0No linked articles in our index yet.