CVE-2023-46546

TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formStats...

CVE-2023-46545

TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formWsc...

CVE-2023-46553

CVE-2023-46553 affects TOTOLINK X2000R Gh firmware v1.0.0-B20230221.0948.web, with a stack overflow in the formParentControl function due to input validation issues. Documented impacts include potential arbitrary code execution or denial-of-service. A temporary workaround from PT-2023-30083 sugge...

CVE-2023-46540

TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web is affected by a stack/buffer overflow in the formNtp function. The issue can allow arbitrary code execution or denial of service (per multiple sources) and is documented as a high-severity vulnerability. Some sources suggest a temporary mitigation by ...

CVE-2023-46547

TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web is affected by a stack overflow in the formSysLog function. The root cause is improper validation of input length/size in formSysLog, enabling a stack overflow that can lead to arbitrary code execution or denial of service. Affected product: TOTOLINK X...

CVE-2023-46564

TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formDMZ...

CVE-2023-46551

TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formReflashClientTbl...

CVE-2023-46542

TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formMeshUploadConfig...

CVE-2023-46558

TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formMapDelDevice...

CVE-2023-46544

TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formWirelessTbl...

CVE-2023-46548

TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formWlanRedirect...

TOTOLINK X2000R Buffer Error Vulnerability

TOTOLINK X2000R is a wireless router from China's Gion Electronics TOTOLINK. A security vulnerability exists in the TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web version, which stems from a buffer overflow issue in the formWlSiteSurvey method...

CVE-2023-46552: Out-of-bounds Write

TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formMultiAP...

CVE-2023-46553: Out-of-bounds Write

TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formParentControl...

CVE-2023-46551: Out-of-bounds Write

TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formReflashClientTbl...

CVE-2023-46542: Out-of-bounds Write

TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formMeshUploadConfig...

CVE-2023-46554: Out-of-bounds Write

TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formMapDel...

CVE-2023-46564: Out-of-bounds Write

TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formDMZ...

CVE-2023-46563: Out-of-bounds Write

TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formIpQoS...

CVE-2024-33433

Cross Site Scripting vulnerability in TOTOLINK X2000R before v1.0.0-B20231213.1013 allows a remote attacker to execute arbitrary code via the Guest Access Control parameter in the Wireless Page...