Vulnerabilities > Totolink > X2000R Firmware

DATE CVE VULNERABILITY TITLE RISK
2024-01-25 CVE-2024-22529 Command Injection vulnerability in Totolink X2000R Firmware 2.0.0B20230727.10434
TOTOLINK X2000R_V2 V2.0.0-B20230727.10434 has a command injection vulnerability in the sub_449040 (handle function of formUploadFile) of /bin/boa.
network
low complexity
totolink CWE-77
critical
9.8
2024-01-16 CVE-2024-0579 Command Injection vulnerability in Totolink X2000R Firmware 1.0.0B20221212.1452
A vulnerability classified as critical was found in Totolink X2000R 1.0.0-B20221212.1452.
network
low complexity
totolink CWE-77
critical
9.8
2024-01-09 CVE-2023-7222 Out-of-bounds Write vulnerability in Totolink X2000R Firmware 1.0.0B20221212.1452
A vulnerability was found in Totolink X2000R 1.0.0-B20221212.1452.
network
low complexity
totolink CWE-787
critical
9.8
2024-01-07 CVE-2023-7208 Out-of-bounds Write vulnerability in Totolink X2000R Firmware 2.0.0B20230727.10434
A vulnerability classified as critical was found in Totolink X2000R_V2 2.0.0-B20230727.10434.
network
low complexity
totolink CWE-787
critical
9.8
2023-12-30 CVE-2023-51133 Out-of-bounds Write vulnerability in Totolink X2000R Firmware 1.0.0B20230221.0948.Web
TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formRoute.
network
low complexity
totolink CWE-787
critical
9.8
2023-12-30 CVE-2023-51135 Out-of-bounds Write vulnerability in Totolink X2000R Firmware 1.0.0B20230221.0948.Web
TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formPasswordSetup.
network
low complexity
totolink CWE-787
critical
9.8
2023-12-30 CVE-2023-51136 Out-of-bounds Write vulnerability in Totolink X2000R Firmware 1.0.0B20230221.0948.Web
TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formRebootSchedule.
network
low complexity
totolink CWE-787
critical
9.8
2023-10-25 CVE-2023-46540 Out-of-bounds Write vulnerability in Totolink X2000R Firmware 1.0.0B20230221.0948
TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formNtp.
network
low complexity
totolink CWE-787
critical
9.8
2023-10-25 CVE-2023-46541 Out-of-bounds Write vulnerability in Totolink X2000R Firmware 1.0.0B20230221.0948
TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formIpv6Setup.
network
low complexity
totolink CWE-787
critical
9.8
2023-10-25 CVE-2023-46542 Out-of-bounds Write vulnerability in Totolink X2000R Firmware 1.0.0B20230221.0948
TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formMeshUploadConfig.
network
low complexity
totolink CWE-787
critical
9.8