CVE-2023-46549

TOTOLINK X2000R Gh is affected by a stack overflow in the formSetLg method on firmware version 1.0.0-B20230221.0948.web. The root cause is improper validation of input length/size in formSetLg, which can lead to arbitrary code execution or denial of service. Public sources in CNVD/CNNVD describe ...

PT-2023-30071 · Totolink · Totolink X2000R

Name of the Vulnerable Software and Affected Versions: TOTOLINK X2000R Gh version 1.0.0-B20230221.0948.web Description: A stack overflow issue was discovered in the function formIpv6Setup. Recommendations: For version 1.0.0-B20230221.0948.web, as a temporary workaround, consider disabling the...

PT-2023-6454 · Totolink · Totolink X2000R

Name of the Vulnerable Software and Affected Versions: TOTOLINK X2000R Gh version 1.0.0-B20230221.0948.web Description: The issue is related to a stack overflow in the formNtp function, which can be exploited to execute arbitrary code. This is due to a buffer overflow when reading data, allowing ...

CVE-2023-46541

Summary (CVE-2023-46541) Totolink X2000R Gh, v1.0.0-B20230221.0948.web, contains a stack overflow in the function formIpv6Setup. The root cause is improper input validation of data fed to formIpv6Setup, enabling a stack-based overflow. Documented impacts include potential arbitrary code execution...

CVE-2023-46542

TOTOLINK X2000R Gh (firmware 1.0.0-B20230221.0948.web) contains a stack overflow in the function formMeshUploadConfig. The issue is documented across multiple sources (CNVD/CNNVD/PRION) as a buffer/stack overflow that could allow arbitrary code execution or cause a denial of service. No official ...

CVE-2023-46557

The CVE-2023-46557 entry affects the TOTOLINK X2000R Gh router (version 1.0.0-B20230221.0948.web). A stack overflow is triggered in the formMultiAPVLAN() function, per multiple sources, with potential for arbitrary code execution or denial of service. The available connected documents describe th...

CVE-2023-46564

TOTOLINK X2000R Gh (v1.0.0-B20230221.0948.web) is affected by a stack overflow in the formDMZ() function. Exploitation could allow arbitrary code execution or cause a denial of service, as described in CNVD/CNNVD entries. A patch/fixed version is not disclosed in the provided documents; as a temp...

PT-2023-30074 · Totolink · Totolink X2000R

Name of the Vulnerable Software and Affected Versions: TOTOLINK X2000R Gh version 1.0.0-B20230221.0948.web Description: A stack overflow issue was discovered in the function formWirelessTbl. Recommendations: For version 1.0.0-B20230221.0948.web, as a temporary workaround, consider disabling the...

TOTOLINK X2000R 缓冲区错误漏洞

The TOTOLINK X2000R Gh is a wireless router from China's Gion Electronics TOTOLINK. The TOTOLINK X2000R Gh suffers from a buffer overflow vulnerability that stems from the formFilter method failing to properly validate the length of input data, which can be exploited by an attacker to execute...

CVE-2023-46540

TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formNtp...

TOTOLINK X2000R Buffer Error Vulnerability

The TOTOLINK X2000R is a wireless router from China's Gion Electronics TOTOLINK. A security vulnerability exists in the TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web version, which stems from a buffer overflow issue in the formWirelessTbl method...

CVE-2023-46559

TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formIPv6Addr...

PT-2023-30075 · Totolink · Totolink X2000R

Name of the Vulnerable Software and Affected Versions: TOTOLINK X2000R Gh version 1.0.0-B20230221.0948.web Description: A stack overflow issue was discovered in the function formWsc. Recommendations: For TOTOLINK X2000R Gh version 1.0.0-B20230221.0948.web, consider disabling the formWsc function ...

TOTOLINK X2000R Buffer Error Vulnerability

The TOTOLINK X2000R is a wireless router from China's Gion Electronics TOTOLINK. A security vulnerability exists in the TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web version, which stems from a buffer overflow issue in the formWsc method...

CVE-2023-46540

TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formNtp...

CVE-2023-46549

TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formSetLg...

CVE-2023-46562

TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formDosCfg...

TOTOLINK X2000R 缓冲区错误漏洞

The TOTOLINK X2000R Gh is a wireless router from China's Gion Electronics TOTOLINK. The TOTOLINK X2000R Gh suffers from a buffer overflow vulnerability that stems from the formDMZ method failing to properly validate the length and size of input data, which can be exploited by an attacker to execu...

CVE-2023-46555

TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formPortFw...

CVE-2023-46550

TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web contains a stack overflow in the formMapDelDevice function. Affected component: the router’s firmware feature formMapDelDevice; root cause: stack overflow. CVSS v3.1 base score 9.8 (CRITICAL) with high impact to confidentiality, integrity, and availabi...