CVE-2023-46540

TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web is affected by a stack/buffer overflow in the formNtp function. The issue can allow arbitrary code execution or denial of service (per multiple sources) and is documented as a high-severity vulnerability. Some sources suggest a temporary mitigation by ...

CVE-2023-46553

CVE-2023-46553 affects TOTOLINK X2000R Gh firmware v1.0.0-B20230221.0948.web, with a stack overflow in the formParentControl function due to input validation issues. Documented impacts include potential arbitrary code execution or denial-of-service. A temporary workaround from PT-2023-30083 sugge...

PT-2023-30091 · Totolink · Totolink X2000R

Name of the Vulnerable Software and Affected Versions: TOTOLINK X2000R Gh version 1.0.0-B20230221.0948.web Description: The issue is related to a stack overflow that occurs via the formDosCfg function. Recommendations: For TOTOLINK X2000R Gh version 1.0.0-B20230221.0948.web, as a temporary...

TOTOLINK X2000R 缓冲区错误漏洞

TOTOLINK X2000R Gh is a WiFi 6 router from China's Gion Electronics TOTOLINK, which supports Gigabit network and Easy Mesh features with multi-device connectivity and wireless expansion. The TOTOLINK X2000R Gh suffers from a buffer overflow vulnerability that stems from the formSetLg method faili...

PT-2023-30076 · Totolink · Totolink X2000R

Name of the Vulnerable Software and Affected Versions: TOTOLINK X2000R Gh version 1.0.0-B20230221.0948.web Description: A stack overflow issue was discovered in the function formStats. Recommendations: For version 1.0.0-B20230221.0948.web, as a temporary workaround, consider disabling the formSta...

TOTOLINK X2000R Buffer Error Vulnerability

TOTOLINK X2000R is a wireless router from China's Gion Electronics TOTOLINK. A security vulnerability exists in the TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web version, which stems from a buffer overflow issue in the formWlSiteSurvey method...

CVE-2023-46558

TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formMapDelDevice...

CVE-2023-46552

TOTOLINK X2000R Gh firmware v1.0.0-B20230221.0948.web contains a stack overflow in the formMultiAP function. Some sources describe potential for arbitrary code execution and DoS; others only cite a stack overflow. A PT-Security advisory recommends disabling the formMultiAP function as a temporary...

PT-2023-30073 · Totolink · Totolink X2000R

Name of the Vulnerable Software and Affected Versions: TOTOLINK X2000R Gh version 1.0.0-B20230221.0948.web Description: A stack overflow issue was discovered via the function formWlSiteSurvey. This issue affects the specified version of the TOTOLINK X2000R Gh router. Recommendations: For TOTOLINK...

CVE-2023-46543

CVE-2023-46543 affects TOTOLINK X2000R Gh; a stack overflow in the function formWlSiteSurvey on firmware 1.0.0-B20230221.0948.web. Underlying issue: stack overflow in formWlSiteSurvey, with high impact to confidentiality, integrity, and availability (CVSS 3.1: base scores up to 9.8). Exploitation...

PT-2023-30089 · Totolink · Totolink X2000R

Name of the Vulnerable Software and Affected Versions: TOTOLINK X2000R Gh version 1.0.0-B20230221.0948.web Description: The issue is related to a stack overflow in the formIPv6Addr function. Recommendations: For TOTOLINK X2000R Gh version 1.0.0-B20230221.0948.web, as a temporary workaround,...

CVE-2023-46544

TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formWirelessTbl...

CVE-2023-46547

TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web is affected by a stack overflow in the formSysLog function. The root cause is improper validation of input length/size in formSysLog, enabling a stack overflow that can lead to arbitrary code execution or denial of service. Affected product: TOTOLINK X...

CVE-2023-46554

TOTOLINK X2000R Gh firmware 1.0.0-B20230221.0948.web contains a stack overflow in the formMapDel function. The issue is documented across multiple sources as a stack overflow vulnerability affecting this version, with CVSS-derived impact on confidentiality, integrity, and availability marked high...

CVE-2023-46543

TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formWlSiteSurvey...

CVE-2024-33433

Cross Site Scripting vulnerability in TOTOLINK X2000R before v1.0.0-B20231213.1013 allows a remote attacker to execute arbitrary code via the Guest Access Control parameter in the Wireless Page...