What is CVE-2023-7222?

CVE-2023-7222 is a high-severity vulnerability in Totolink X2000r, classified under Buffer Copy without Checking Size of Input (Classic Buffer Overflow). CVSS score: 7.2/10. Published 2024-01-09.

How severe is CVE-2023-7222?

High severity. CVSS v3 base score is 7.2 out of 10.

Buffer overflow in Totolink X2000r

CVE-2023-7222

A vulnerability was found in Totolink X2000R 1.0.0-B20221212.1452. It has been declared as critical. This vulnerability affects the function formTmultiAP of the file /bin/boa of the component HTTP POST Request Handler. The manipulation of…

Vulnerability class: Buffer Overflow

EPSS: 0.002 (41.0th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.2 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H.

Affected products

Totolink X2000r — versions 1.0.0-B20221212.1452

Weakness classification (CWE)

CWE-120 — Buffer Copy without Checking Size of Input (Classic Buffer Overflow)

References

vuldb.com/ (vdb-entry, technical-description)
vuldb.com/ (signature, permissions-required)
github.com/jylsec/vuldb/blob/main/TOTOLINK/X2000R/formTmultiAP/README.md (broken-link, exploit)

Frequently asked questions

What is CVE-2023-7222?: CVE-2023-7222 is a high-severity vulnerability in Totolink X2000r, classified under Buffer Copy without Checking Size of Input (Classic Buffer Overflow). CVSS score: 7.2/10. Published 2024-01-09.
How severe is CVE-2023-7222?: High severity. CVSS v3 base score is 7.2 out of 10.