Stack overflow

TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formMultiAPVLAN...

CVE-2023-46556

TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formFilter...

CVE-2023-46557

TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formMultiAPVLAN...

CVE-2023-46552

TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formMultiAP...

CVE-2023-46545

Totolink X2000R Gh (firmware 1.0.0-B20230221.0948.web) is affected by a stack overflow in the formWsc function. Root cause is a stack overflow in formWsc that could destabilize or crash the device. Some sources suggest a temporary workaround: disable the formWsc function until a patch is availabl...

CVE-2023-46549

TOTOLINK X2000R Gh is affected by a stack overflow in the formSetLg method on firmware version 1.0.0-B20230221.0948.web. The root cause is improper validation of input length/size in formSetLg, which can lead to arbitrary code execution or denial of service. Public sources in CNVD/CNNVD describe ...

CVE-2023-46557

TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formMultiAPVLAN...

CVE-2023-46550

TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formMapDelDevice...

PT-2023-6454 · Totolink · Totolink X2000R

Name of the Vulnerable Software and Affected Versions: TOTOLINK X2000R Gh version 1.0.0-B20230221.0948.web Description: The issue is related to a stack overflow in the formNtp function, which can be exploited to execute arbitrary code. This is due to a buffer overflow when reading data, allowing ...

CVE-2023-46559

TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formIPv6Addr...

CVE-2023-46564

TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formDMZ...

CVE-2023-46548

TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formWlanRedirect...

CVE-2023-46564

TOTOLINK X2000R Gh (v1.0.0-B20230221.0948.web) is affected by a stack overflow in the formDMZ() function. Exploitation could allow arbitrary code execution or cause a denial of service, as described in CNVD/CNNVD entries. A patch/fixed version is not disclosed in the provided documents; as a temp...

PT-2023-30085 · Totolink · Totolink X2000R

Name of the Vulnerable Software and Affected Versions: TOTOLINK X2000R Gh version 1.0.0-B20230221.0948.web Description: A stack overflow issue was discovered in the function formPortFw. Recommendations: For TOTOLINK X2000R Gh version 1.0.0-B20230221.0948.web, consider disabling the formPortFw...

TOTOLINK X2000R 缓冲区错误漏洞

TOTOLINK X2000R Gh is a WiFi 6 router from China's Gion Electronics TOTOLINK, which supports Gigabit network and Easy Mesh features with multi-device connectivity and wireless expansion. The TOTOLINK X2000R Gh suffers from a buffer overflow vulnerability that originates from the formTcpipSetup...

CVE-2023-46543

TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formWlSiteSurvey...

CVE-2023-46552

TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formMultiAP...

CVE-2023-46541

TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formIpv6Setup...

CVE-2023-46546

TOTOLINK X2000R Gh (v1.0.0-B20230221.0948.web) contains a stack overflow in the formStats function. Reported across multiple sources, the flaw can potentially lead to arbitrary code execution or a denial of service. CVE-2023-46546 is associated with this issue; the NVD/CNVD entries describe buffe...

CVE-2023-46557

The CVE-2023-46557 entry affects the TOTOLINK X2000R Gh router (version 1.0.0-B20230221.0948.web). A stack overflow is triggered in the formMultiAPVLAN() function, per multiple sources, with potential for arbitrary code execution or denial of service. The available connected documents describe th...