X5000r Firmware Security Vulnerabilities and Issues — X5000r Firmware CVE List

Lucene search

TotolinkX5000r Firmware

12 matches found

CVE•added 2023/05/05 2:15 p.m.•79 views

CVE-2023-30013

TOTOLINK X5000R V9.1.0u.6118_B20201102 and V9.1.0u.6369_B20230113 contain a command insertion vulnerability in setting/setTracerouteCfg. This vulnerability allows an attacker to execute arbitrary commands through the "command" parameter.

9.8CVSS9.7AI score0.91748EPSS

CVE•added 2023/10/16 6:15 p.m.•63 views

CVE-2023-45984

TOTOLINK X5000R V9.1.0u.6118_B20201102 and TOTOLINK A7000R V9.1.0u.6115_B20201022 was discovered to contain a stack overflow via the lang parameter in the function setLanguageCfg.

9.8CVSS9.7AI score0.0021EPSS

CVE•added 2023/05/31 1:15 p.m.•59 views

CVE-2023-33486

TOTOLINK X5000R V9.1.0u.6118_B20201102 and V9.1.0u.6369_B20230113 contain a command insertion vulnerability in setOpModeCfg. This vulnerability allows an attacker to execute arbitrary commands through the "hostName" parameter.

9.8CVSS9.7AI score0.00752EPSS

CVE•added 2023/05/31 1:15 p.m.•55 views

CVE-2023-33487

TOTOLINK X5000R V9.1.0u.6118_B20201102 and V9.1.0u.6369_B20230113 contains a command insertion vulnerability in setDiagnosisCfg.This vulnerability allows an attacker to execute arbitrary commands through the "ip" parameter.

9.8CVSS9.7AI score0.00752EPSS

CVE•added 2023/05/31 1:15 p.m.•53 views

CVE-2023-33485

TOTOLINK X5000R V9.1.0u.6118_B20201102 and V9.1.0u.6369_B20230113 contains a post-authentication buffer overflow via parameter sPort/ePort in the addEffect function.

8.8CVSS8.8AI score0.00342EPSS

CVE•added 2023/10/16 5:15 a.m.•51 views

CVE-2023-36947

TOTOLINK X5000R V9.1.0u.6118_B20201102 and TOTOLINK A7000R V9.1.0u.6115_B20201022 was discovered to contain a stack overflow via the File parameter in the function UploadCustomModule.

9.8CVSS9.7AI score0.00907EPSS

CVE•added 2023/10/16 6:15 p.m.•50 views

CVE-2023-45985

TOTOLINK X5000R V9.1.0u.6118_B20201102 and TOTOLINK A7000R V9.1.0u.6115_B20201022 were discovered to contain a stack overflow in the function setParentalRules. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request.

7.5CVSS7.5AI score0.00348EPSS

CVE•added 2023/06/06 2:15 p.m.•45 views

CVE-2023-31569

TOTOLINK X5000R V9.1.0cu.2350_B20230313 was discovered to contain a command injection via the setWanCfg function.

9.8CVSS9.7AI score0.05158EPSS

CVE•added 2023/08/21 2:15 a.m.•44 views

CVE-2023-39618

TOTOLINK X5000R B20210419 was discovered to contain a remote code execution (RCE) vulnerability via the setTracerouteCfg interface.

9.8CVSS9.8AI score0.08385EPSS

CVE•added 2023/08/21 2:15 a.m.•42 views

CVE-2023-39617

TOTOLINK X5000R_V9.1.0cu.2089_B20211224 and X5000R_V9.1.0cu.2350_B20230313 were discovered to contain a remote code execution (RCE) vulnerability via the lang parameter in the setLanguageCfg function.

9.8CVSS9.8AI score0.08385EPSS

CVE•added 2023/10/16 6:15 a.m.•37 views

CVE-2023-36950

TOTOLINK X5000R V9.1.0u.6118_B20201102 and TOTOLINK A7000R V9.1.0u.6115_B20201022 was discovered to contain a stack overflow via the http_host parameter in the function loginAuth.

9.8CVSS9.6AI score0.00907EPSS

CVE•added 2023/12/08 4:15 p.m.•29 views

CVE-2023-6612

A vulnerability was found in Totolink X5000R 9.1.0cu.2300_B20230112. It has been rated as critical. This issue affects the function setDdnsCfg/setDynamicRoute/setFirewallType/setIPSecCfg/setIpPortFilterRules/setLancfg/setLoginPasswordCfg/setMacFilterRules/setMtknatCfg/setNetworkConfig/setPortForwar...

9.8CVSS7AI score0.11002EPSS