CVE-2024-28402

2024-03-2100:00:00

mitre

github.com

totolink x2000r

firewall

xss

vulnerability

stored cross-site scripting

ip/port filtering

AI Score

5.9

Confidence

High

SSVC

Exploitation

poc

Automatable

Technical Impact

partial

JSON

TOTOLINK X2000R before V1.0.0-B20231213.1013 contains a Stored Cross-site scripting (XSS) vulnerability in IP/Port Filtering under the Firewall Page.

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:o:totolink:x2000r_firmware:*:*:*:*:*:*:*:*"
    ],
    "vendor": "totolink",
    "product": "x2000r_firmware",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "1.0.0-b20231213.1013",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  }
]