VendorsTOTOLINKx2000r_firmwareall versions

Vulnerabilities

TOTOLINK X2000R Firmware

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

45CVEs

Totolink X2000R formMapDelDevice command injection

Published 2024-01-16 · Modified

9.8EPSS 0.022

Totolink X2000R_V2 boa formTmultiAP buffer overflow

Published 2024-01-07 · Modified

9.8EPSS 0.017

TOTOLINK X2000R_V2 V2.0.0-B20230727.10434 has a command injection vulnerability in the sub_449040 (handle function of formUploadFile) of /bin/boa.

Published 2024-01-25 · Modified

9.8EPSS 0.017

Totolink X2000R HTTP POST Request boa formTmultiAP buffer overflow

Published 2024-01-09 · Modified

9.8EPSS 0.013

TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formWsc.

Published 2023-10-25 · Modified

9.8EPSS 0.010

TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formMeshUploadConfig.

Published 2023-10-25 · Modified

9.8EPSS 0.010

TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formWlSiteSurvey.

Published 2023-10-25 · Modified

9.8EPSS 0.010

TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formNtp.

Published 2023-10-25 · Modified

9.8EPSS 0.010

TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formSysLog.

Published 2023-10-25 · Modified

9.8EPSS 0.010

TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formIpv6Setup.

Published 2023-10-25 · Modified

9.8EPSS 0.010

TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formStats.

Published 2023-10-25 · Modified

9.8EPSS 0.010

TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formWirelessTbl.

Published 2023-10-25 · Modified

9.8EPSS 0.010

TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formWlanRedirect.

Published 2023-10-25 · Modified

9.8EPSS 0.008

TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formSetLg.

Published 2023-10-25 · Modified

9.8EPSS 0.008

TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formMapDelDevice.

Published 2023-10-25 · Modified

9.8EPSS 0.008

TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formMapDel.

Published 2023-10-25 · Modified

9.8EPSS 0.008

TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formPortFw.

Published 2023-10-25 · Modified

9.8EPSS 0.008

TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formFilter.

Published 2023-10-25 · Modified

9.8EPSS 0.008

TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formMultiAPVLAN.

Published 2023-10-25 · Modified

9.8EPSS 0.008

TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formMapDelDevice.

Published 2023-10-25 · Modified

9.8EPSS 0.008

TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formReflashClientTbl.

Published 2023-10-25 · Modified

9.8EPSS 0.008

TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formIpQoS.

Published 2023-10-25 · Modified

9.8EPSS 0.008

TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formDMZ.

Published 2023-10-25 · Modified

9.8EPSS 0.008

TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formMultiAP.

Published 2023-10-25 · Modified

9.8EPSS 0.008

TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formParentControl.

Published 2023-10-25 · Modified

9.8EPSS 0.008

TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formIPv6Addr.

Published 2023-10-25 · Modified

9.8EPSS 0.008

TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formTcpipSetup.

Published 2023-10-25 · Modified

9.8EPSS 0.008

TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formDosCfg.

Published 2023-10-25 · Modified

9.8EPSS 0.008

TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formRoute.

Published 2023-12-30 · Modified

9.8EPSS 0.006

TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formPasswordSetup.

Published 2023-12-30 · Modified

9.8EPSS 0.006

TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formRebootSchedule.

Published 2023-12-30 · Modified

9.8EPSS 0.006

TOTOLINK N600R/X2000R FTP Service vsftpd.conf least privilege violation

Published 2025-07-26 · Analyzed

8.6EPSS 0.009

An issue in TOTOLINK Wi-Fi 6 Router Series Device X2000R-Gh-V2.0.0 allows a remote attacker to execute arbitrary code via the default password

Published 2025-09-12 · Analyzed

8.0EPSS 0.006

TOTOLINK X2000R before V1.0.0-B20231213.1013 contains a Stored Cross-site scripting (XSS) vulnerability in MAC Filtering under the Firewall Page.

Published 2024-03-15 · Analyzed

8.0EPSS 0.005

TOTOLINK X2000R Administrative shadow.sample default credentials

Published 2025-08-28 · Analyzed

7.0EPSS 0.002

TOTOLINK X2000R formWsc command injection

Published 2025-06-03 · Analyzed

6.5EPSS 0.129

TOTOLINK X2000R formMapDel command injection

Published 2025-06-03 · Analyzed

6.5EPSS 0.032

TOTOLINK X2000R before V1.0.0-B20231213.1013 contains a Stored Cross-site scripting (XSS) vulnerability in IP/Port Filtering under the Firewall Page.

Published 2024-03-21 · Analyzed

5.9EPSS 0.004

TOTOLINK X2000R before v1.0.0-B20231213.1013 contains a Store Cross-site scripting (XSS) vulnerability in Root Access Control under the Wireless Page.

Published 2024-03-15 · Modified

5.4EPSS 0.004

There is a Cross-site scripting (XSS) vulnerability in the Wireless settings under the Easy Setup Page of TOTOLINK X2000R before v1.0.0-B20231213.1013.

Published 2024-03-20 · Modified

5.4EPSS 0.004