Login Request a demo
X2
Product
X2000R
by Totolink · last CVE Aug 28, 2025
10
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities10In the news0Timeline
Severity mix
Critical 3High 2Medium 5Low 0
Severity
All severities10Critical3High2Medium5Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add X2000R to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-22529
9.8
2%
Jan 25
TOTOLINK X2000R_V2 V2.0.0-B20230727.10434 has a command injection vulnerability in the sub_449040 (handle function of formUploadFile) of /bin/boa
Affected: V2 V2.0.0-B20230727.10434
CVE-2024-0579
9.8
2%
Jan 16
Totolink X2000R formMapDelDevice command injection
Affected: 1.0.0-B20221212.1452
CVE-2023-7222
9.8
1%
Jan 9
Totolink X2000R HTTP POST Request boa formTmultiAP buffer overflow
Affected: 1.0.0-B20221212.1452
CVE-2025-8181
7.2
1%
Jul 26
TOTOLINK N600R/X2000R FTP Service vsftpd.conf least privilege violation
Affected: 1.0.0.1
CVE-2025-9577
7.0
0%
Aug 28
TOTOLINK X2000R Administrative shadow.sample default credentials
Affected: 2.0
CVE-2025-5515
6.3
3%
Jun 3
TOTOLINK X2000R formMapDel command injection
Affected: 1.0.0-B20230726.1108
CVE-2025-5504
6.3
13%
Jun 3
TOTOLINK X2000R formWsc command injection
Affected: 1.0.0-B20230726.1108
CVE-2025-5543
4.8
0%
Jun 3
TOTOLINK X2000R Parent Controls Page cross site scripting
Affected: 1.0.0-B20230726.1108
CVE-2025-5542
4.8
0%
Jun 3
TOTOLINK X2000R Virtual Server Page formPortFw cross site scripting
Affected: 1.0.0-B20230726.1108
CVE-2025-5516
4.8
0%
Jun 3
TOTOLINK X2000R URL Filtering Page formFilter cross site scripting
Affected: 1.0.0-B20230726.1108
Showing 10