Vulnerabilities > Totolink
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2023-10-25 | CVE-2023-46558 | Out-of-bounds Write vulnerability in Totolink X2000R Firmware 1.0.0B20230221.0948 TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formMapDelDevice. | 9.8 |
| 2023-10-25 | CVE-2023-46559 | Out-of-bounds Write vulnerability in Totolink X2000R Firmware 1.0.0B20230221.0948 TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formIPv6Addr. | 9.8 |
| 2023-10-25 | CVE-2023-46560 | Out-of-bounds Write vulnerability in Totolink X2000R Firmware 1.0.0B20230221.0948 TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formTcpipSetup. | 9.8 |
| 2023-10-25 | CVE-2023-46562 | Out-of-bounds Write vulnerability in Totolink X2000R Firmware 1.0.0B20230221.0948 TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formDosCfg. | 9.8 |
| 2023-10-25 | CVE-2023-46563 | Out-of-bounds Write vulnerability in Totolink X2000R Firmware 1.0.0B20230221.0948 TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formIpQoS. | 9.8 |
| 2023-10-25 | CVE-2023-46564 | Out-of-bounds Write vulnerability in Totolink X2000R Firmware 1.0.0B20230221.0948 TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formDMZ. | 9.8 |
| 2023-10-25 | CVE-2023-46574 | Command Injection vulnerability in Totolink A3700R Firmware 9.1.2U.616520211012 An issue in TOTOLINK A3700R v.9.1.2u.6165_20211012 allows a remote attacker to execute arbitrary code via the FileName parameter of the UploadFirmwareFile function. | 9.8 |
| 2023-10-16 | CVE-2023-45984 | Out-of-bounds Write vulnerability in Totolink A7000R Firmware and X5000R Firmware TOTOLINK X5000R V9.1.0u.6118_B20201102 and TOTOLINK A7000R V9.1.0u.6115_B20201022 was discovered to contain a stack overflow via the lang parameter in the function setLanguageCfg. | 9.8 |
| 2023-10-16 | CVE-2023-45985 | Out-of-bounds Write vulnerability in Totolink A7000R Firmware and X5000R Firmware TOTOLINK X5000R V9.1.0u.6118_B20201102 and TOTOLINK A7000R V9.1.0u.6115_B20201022 were discovered to contain a stack overflow in the function setParentalRules. | 7.5 |
| 2023-10-16 | CVE-2023-36950 | Out-of-bounds Write vulnerability in Totolink A7000R Firmware and X5000R Firmware TOTOLINK X5000R V9.1.0u.6118_B20201102 and TOTOLINK A7000R V9.1.0u.6115_B20201022 was discovered to contain a stack overflow via the http_host parameter in the function loginAuth. | 9.8 |