Totolink X2000r Firmware
45 CVEs affecting Totolink X2000r Firmware. Latest disclosed: 2025-09-12. Critical: 28, High: 5.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-22529 | Critical | 9.8 | 2024-01-25 | TOTOLINK X2000R_V2 V2.0.0-B20230727.10434 has a command injection vulnerability in the sub_449040 (handle function of formUploadFile) of /bin/boa. |
CVE-2023-51136 | Critical | 9.8 | 2023-12-30 | TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formRebootSchedule. |
CVE-2023-51135 | Critical | 9.8 | 2023-12-30 | TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formPasswordSetup. |
CVE-2023-51133 | Critical | 9.8 | 2023-12-30 | TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formRoute. |
CVE-2023-46564 | Critical | 9.8 | 2023-10-25 | TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formDMZ. |
CVE-2023-46563 | Critical | 9.8 | 2023-10-25 | TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formIpQoS. |
CVE-2023-46562 | Critical | 9.8 | 2023-10-25 | TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formDosCfg. |
CVE-2023-46560 | Critical | 9.8 | 2023-10-25 | TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formTcpipSetup. |
CVE-2023-46559 | Critical | 9.8 | 2023-10-25 | TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formIPv6Addr. |
CVE-2023-46558 | Critical | 9.8 | 2023-10-25 | TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formMapDelDevice. |
CVE-2023-46557 | Critical | 9.8 | 2023-10-25 | TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formMultiAPVLAN. |
CVE-2023-46556 | Critical | 9.8 | 2023-10-25 | TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formFilter. |
CVE-2023-46555 | Critical | 9.8 | 2023-10-25 | TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formPortFw. |
CVE-2023-46554 | Critical | 9.8 | 2023-10-25 | TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formMapDel. |
CVE-2023-46553 | Critical | 9.8 | 2023-10-25 | TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formParentControl. |
CVE-2023-46552 | Critical | 9.8 | 2023-10-25 | TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formMultiAP. |
CVE-2023-46551 | Critical | 9.8 | 2023-10-25 | TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formReflashClientTbl. |
CVE-2023-46550 | Critical | 9.8 | 2023-10-25 | TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formMapDelDevice. |
CVE-2023-46549 | Critical | 9.8 | 2023-10-25 | TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formSetLg. |
CVE-2023-46548 | Critical | 9.8 | 2023-10-25 | TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formWlanRedirect. |