CVE-2023-46556

Totolink X2000R Gh firmware version 1.0.0-B20230221.0948.web is affected by a stack overflow in the formFilter function. Public records in CVE listings describe the vulnerability as enabling potentially arbitrary code execution or a denial of service on the device. A cited workaround from PT-2023...

CVE-2023-46542

TOTOLINK X2000R Gh (firmware 1.0.0-B20230221.0948.web) contains a stack overflow in the function formMeshUploadConfig. The issue is documented across multiple sources (CNVD/CNNVD/PRION) as a buffer/stack overflow that could allow arbitrary code execution or cause a denial of service. No official ...

CVE-2023-46541

Summary (CVE-2023-46541) Totolink X2000R Gh, v1.0.0-B20230221.0948.web, contains a stack overflow in the function formIpv6Setup. The root cause is improper input validation of data fed to formIpv6Setup, enabling a stack-based overflow. Documented impacts include potential arbitrary code execution...

CVE-2023-46563

TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formIpQoS...

CVE-2023-46555

TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formPortFw...

TOTOLINK X2000R 缓冲区错误漏洞

TOTOLINK X2000R Gh is a WiFi 6 router from China's Gion Electronics TOTOLINK, which supports Gigabit network and Easy Mesh features with multi-device connectivity and wireless expansion. The TOTOLINK X2000R Gh suffers from a buffer overflow vulnerability that stems from the formNtp method failing...

CVE-2023-46560

TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formTcpipSetup...

CVE-2023-46540

TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formNtp...

CVE-2023-46553

TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formParentControl...

CVE-2023-46556

TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formFilter...

TOTOLINK X2000R Buffer Error Vulnerability

The TOTOLINK X2000R is a wireless router from China's Gion Electronics TOTOLINK. A security vulnerability exists in the TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web version, which stems from a buffer overflow issue in the formWirelessTbl method...

PT-2023-30090 · Totolink · Totolink X2000R

Name of the Vulnerable Software and Affected Versions: TOTOLINK X2000R Gh version 1.0.0-B20230221.0948.web Description: A stack overflow issue was discovered in the function formTcpipSetup, which can be exploited. Recommendations: For version 1.0.0-B20230221.0948.web, as a temporary workaround,...

CVE-2023-46555

TOTOLINK X2000R Gh (v1.0.0-B20230221.0948.web) is affected by a stack/buffer overflow in the function formPortFw. The overflow stems from inadequate input length validation, which can be exploited to execute arbitrary code or cause a denial of service. A temporary workaround recommended in PT-202...

CVE-2023-46550

TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formMapDelDevice...

CVE-2023-46555

TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formPortFw...

CVE-2023-46560

Summary (CNE): CVE-2023-46560 affects TOTOLINK X2000R Gh, firmware version 1.0.0-B20230221.0948.web. The issue is a stack overflow in the formTcpipSetup function caused by improper input length validation, as described across multiple sources. The consequence is potential arbitrary code execution...

CVE-2023-46550

TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web contains a stack overflow in the formMapDelDevice function. Affected component: the router’s firmware feature formMapDelDevice; root cause: stack overflow. CVSS v3.1 base score 9.8 (CRITICAL) with high impact to confidentiality, integrity, and availabi...

CVE-2023-46563

TOTOLINK X2000R Gh (firmware v1.0.0-B20230221.0948.web) contains a stack overflow in the formIpQoS() function. The vulnerability arises from improper input validation in formIpQoS, enabling potential arbitrary code execution or crash. Several sources consistently describe a stack buffer overflow ...

CVE-2023-46562

TOTOLINK X2000R Gh router (version 1.0.0-B20230221.0948.web) has a stack/buffer overflow in the formDosCfg function due to inadequate input length validation. This can lead to arbitrary code execution or denial of service as indicated in CNVD/CNNVD entries. Public advisories (e.g., PT-2023-30091)...

CVE-2023-46551

Totolink X2000R Gh firmware v1.0.0-B20230221.0948.web contains a stack/buffer overflow in formReflashClientTbl due to insufficient input length validation, enabling remote code execution or denial of service. CVSS v3.1 metrics indicate CRITICAL impact (C/H, I/H, A/H; network attack vector, no use...