CVE-2023-46541

Summary (CVE-2023-46541) Totolink X2000R Gh, v1.0.0-B20230221.0948.web, contains a stack overflow in the function formIpv6Setup. The root cause is improper input validation of data fed to formIpv6Setup, enabling a stack-based overflow. Documented impacts include potential arbitrary code execution...

CVE-2023-46541

TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formIpv6Setup...

PT-2023-6453 · Totolink · Totolink X2000R

Name of the Vulnerable Software and Affected Versions: TOTOLINK X2000R Gh version v1.0.0-B20230221.0948.web Description: The issue is related to a buffer overflow in the formReflashClientTbl function of the TOTOLINK X2000R Gh router's firmware, allowing a remote attacker to execute arbitrary code...

CVE-2023-46559

TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formIPv6Addr...

PT-2023-30093 · Totolink · Totolink X2000R

Name of the Vulnerable Software and Affected Versions: TOTOLINK X2000R Gh version 1.0.0-B20230221.0948.web Description: A stack overflow issue was discovered via the function formDMZ. Recommendations: For TOTOLINK X2000R Gh version 1.0.0-B20230221.0948.web, as a temporary workaround, consider...

CVE-2023-46564

TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formDMZ...

CVE-2023-46546

TOTOLINK X2000R Gh (v1.0.0-B20230221.0948.web) contains a stack overflow in the formStats function. Reported across multiple sources, the flaw can potentially lead to arbitrary code execution or a denial of service. CVE-2023-46546 is associated with this issue; the NVD/CNVD entries describe buffe...

PT-2023-30079 · Totolink · Totolink X2000R

Name of the Vulnerable Software and Affected Versions: TOTOLINK X2000R Gh version 1.0.0-B20230221.0948.web Description: A stack overflow issue was discovered in the function formSetLg. Recommendations: For version 1.0.0-B20230221.0948.web, as a temporary workaround, consider disabling the formSet...

CVE-2023-46560

Summary (CNE): CVE-2023-46560 affects TOTOLINK X2000R Gh, firmware version 1.0.0-B20230221.0948.web. The issue is a stack overflow in the formTcpipSetup function caused by improper input length validation, as described across multiple sources. The consequence is potential arbitrary code execution...

CVE-2023-46551

Totolink X2000R Gh firmware v1.0.0-B20230221.0948.web contains a stack/buffer overflow in formReflashClientTbl due to insufficient input length validation, enabling remote code execution or denial of service. CVSS v3.1 metrics indicate CRITICAL impact (C/H, I/H, A/H; network attack vector, no use...

CVE-2023-46559

The CVE-2023-46559 entry concerns TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web, where a stack overflow is triggered in the formIPv6Addr function. Affected component: formIPv6Addr in TOTOLINK X2000R Gh firmware/web build. Documented impact indicates high confidentiality, integrity, and availabilit...

PT-2023-30074 · Totolink · Totolink X2000R

Name of the Vulnerable Software and Affected Versions: TOTOLINK X2000R Gh version 1.0.0-B20230221.0948.web Description: A stack overflow issue was discovered in the function formWirelessTbl. Recommendations: For version 1.0.0-B20230221.0948.web, as a temporary workaround, consider disabling the...

CVE-2023-46548

TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web is affected by a stack overflow in the formWlanRedirect function. The CVE-2023-46548 entry reports a network-remote vulnerability with CVSS v3.1: 9.8 (CRITICAL) in which no user interaction is required and all impacts (confidentiality, integrity, avail...

PT-2023-30088 · Totolink · Totolink X2000R

Name of the Vulnerable Software and Affected Versions: TOTOLINK X2000R Gh version 1.0.0-B20230221.0948.web Description: A stack overflow issue was discovered in the function formMapDelDevice. Recommendations: For version 1.0.0-B20230221.0948.web, as a temporary workaround, consider disabling the...

CVE-2023-46563

TOTOLINK X2000R Gh (firmware v1.0.0-B20230221.0948.web) contains a stack overflow in the formIpQoS() function. The vulnerability arises from improper input validation in formIpQoS, enabling potential arbitrary code execution or crash. Several sources consistently describe a stack buffer overflow ...

PT-2023-30090 · Totolink · Totolink X2000R

Name of the Vulnerable Software and Affected Versions: TOTOLINK X2000R Gh version 1.0.0-B20230221.0948.web Description: A stack overflow issue was discovered in the function formTcpipSetup, which can be exploited. Recommendations: For version 1.0.0-B20230221.0948.web, as a temporary workaround,...

CVE-2023-46544

The CVE-2023-46544 entry concerns TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web, with a stack overflow in the function formWirelessTbl. The root cause is a stack overflow vulnerability in that component, affecting the firmware/web interface. CVSS data indicates high impact to confidentiality, inte...

TOTOLINK X2000R Buffer Error Vulnerability

The TOTOLINK X2000R is a wireless router from China's Gion Electronics TOTOLINK. A security vulnerability exists in the TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web version, which stems from a buffer overflow issue in the formWirelessTbl method...

CVE-2023-46559

TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formIPv6Addr...

PT-2023-30075 · Totolink · Totolink X2000R

Name of the Vulnerable Software and Affected Versions: TOTOLINK X2000R Gh version 1.0.0-B20230221.0948.web Description: A stack overflow issue was discovered in the function formWsc. Recommendations: For TOTOLINK X2000R Gh version 1.0.0-B20230221.0948.web, consider disabling the formWsc function ...