XF
Product
X2000r Firmware
by Totolink · last CVE Sep 12, 2025
45
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 31High 4Medium 10Low 0
Watch

Add X2000r Firmware to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-22529
9.8
2%
Jan 25
TOTOLINK X2000R_V2 V2.0.0-B20230727.10434 has a command injection vulnerability in the sub_449040 (handle function of formUploadFile) of /bin/boa
Affected: 2.0.0-b20230727.10434
CVE-2024-0579
9.8
2%
Jan 16
A vulnerability classified as critical was found in Totolink X2000R 1.0.0-B20221212.1452
Affected: 1.0.0-b20221212.1452
CVE-2023-7222
9.8
1%
Jan 9
A vulnerability was found in Totolink X2000R 1.0.0-B20221212.1452
Affected: 1.0.0-b20221212.1452
CVE-2023-7208
9.8
2%
Jan 7
A vulnerability classified as critical was found in Totolink X2000R_V2 2.0.0-B20230727.10434
Affected: 2.0.0-b20230727.10434
CVE-2023-51136
9.8
1%
Dec 30
TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formRebootSchedule
Affected: 1.0.0-b20230221.0948.web
CVE-2023-51135
9.8
1%
Dec 30
TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formPasswordSetup
Affected: 1.0.0-b20230221.0948.web
CVE-2023-51133
9.8
1%
Dec 30
TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formRoute
Affected: 1.0.0-b20230221.0948.web
CVE-2023-46564
9.8
1%
Oct 25
TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formDMZ
Affected: 1.0.0-b20230221.0948
CVE-2023-46563
9.8
1%
Oct 25
TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formIpQoS
Affected: 1.0.0-b20230221.0948
CVE-2023-46562
9.8
1%
Oct 25
TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formDosCfg
Affected: 1.0.0-b20230221.0948
CVE-2023-46560
9.8
1%
Oct 25
TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formTcpipSetup
Affected: 1.0.0-b20230221.0948
CVE-2023-46559
9.8
1%
Oct 25
TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formIPv6Addr
Affected: 1.0.0-b20230221.0948
CVE-2023-46558
9.8
1%
Oct 25
TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formMapDelDevice
Affected: 1.0.0-b20230221.0948
CVE-2023-46557
9.8
1%
Oct 25
TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formMultiAPVLAN
Affected: 1.0.0-b20230221.0948
CVE-2023-46556
9.8
1%
Oct 25
TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formFilter
Affected: 1.0.0-b20230221.0948
CVE-2023-46555
9.8
1%
Oct 25
TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formPortFw
Affected: 1.0.0-b20230221.0948
CVE-2023-46554
9.8
1%
Oct 25
TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formMapDel
Affected: 1.0.0-b20230221.0948
CVE-2023-46553
9.8
1%
Oct 25
TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formParentControl
Affected: 1.0.0-b20230221.0948
CVE-2023-46552
9.8
1%
Oct 25
TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formMultiAP
Affected: 1.0.0-b20230221.0948
CVE-2023-46551
9.8
1%
Oct 25
TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formReflashClientTbl
Affected: 1.0.0-b20230221.0948
CVE-2023-46550
9.8
1%
Oct 25
TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formMapDelDevice
Affected: 1.0.0-b20230221.0948
CVE-2023-46549
9.8
1%
Oct 25
TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formSetLg
Affected: 1.0.0-b20230221.0948
CVE-2023-46548
9.8
1%
Oct 25
TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formWlanRedirect
Affected: 1.0.0-b20230221.0948
CVE-2023-46547
9.8
1%
Oct 25
TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formSysLog
Affected: 1.0.0-b20230221.0948
CVE-2023-46546
9.8
1%
Oct 25
TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formStats
Affected: 1.0.0-b20230221.0948
CVE-2023-46545
9.8
1%
Oct 25
TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formWsc
Affected: 1.0.0-b20230221.0948
CVE-2023-46544
9.8
1%
Oct 25
TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formWirelessTbl
Affected: 1.0.0-b20230221.0948
CVE-2023-46543
9.8
1%
Oct 25
TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formWlSiteSurvey
Affected: 1.0.0-b20230221.0948
CVE-2023-46542
9.8
1%
Oct 25
TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formMeshUploadConfig
Affected: 1.0.0-b20230221.0948
CVE-2023-46541
9.8
1%
Oct 25
TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formIpv6Setup
Affected: 1.0.0-b20230221.0948
CVE-2023-46540
9.8
1%
Oct 25
TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formNtp
Affected: 1.0.0-b20230221.0948
CVE-2025-57579
8.0
1%
Sep 12
An issue in TOTOLINK Wi-Fi 6 Router Series Device X2000R-Gh-V2.0.0 allows a remote attacker to execute arbitrary code via the default password
Affected: 2.0.0-b20230727.1043.web
CVE-2024-28404
8.0
0%
Mar 15
TOTOLINK X2000R before V1.0.0-B20231213.1013 contains a Stored Cross-site scripting (XSS) vulnerability in MAC Filtering under the Firewall Page
Affected: before 1.0.0-b20231213.1013
CVE-2025-8181
7.2
1%
Jul 26
A vulnerability, which was classified as critical, was found in TOTOLINK N600R and X2000R 1.0.0.1
Affected: 1.0.0
CVE-2025-9577
7.0
0%
Aug 28
A security flaw has been discovered in TOTOLINK X2000R up to 2.0.0
Affected: 2.0.0-b20230727.1043.web
CVE-2025-5515
6.3
3%
Jun 3
A vulnerability, which was classified as critical, has been found in TOTOLINK X2000R 1.0.0-B20230726.1108
Affected: 1.0.0-b20230726.1108
CVE-2025-5504
6.3
13%
Jun 3
A vulnerability has been found in TOTOLINK X2000R 1.0.0-B20230726.1108 and classified as critical
Affected: 1.0.0-b20230726.1108
CVE-2024-28402
5.9
0%
Apr 11
TOTOLINK X2000R before V1.0.0-B20231213.1013 contains a Stored Cross-site scripting (XSS) vulnerability in IP/Port Filtering under the Firewall Page
Affected: before 1.0.0-b20231213.1013
CVE-2024-29419
5.4
0%
Mar 20
There is a Cross-site scripting (XSS) vulnerability in the Wireless settings under the Easy Setup Page of TOTOLINK X2000R before v1.0.0-B20231213.1013
Affected: before 1.0.0-b20231213.1013
CVE-2024-28401
5.4
0%
Mar 15
TOTOLINK X2000R before v1.0.0-B20231213.1013 contains a Store Cross-site scripting (XSS) vulnerability in Root Access Control under the Wireless Page
Affected: before 1.0.0-b20231213.1013
CVE-2024-28403
5.4
0%
Mar 15
TOTOLINK X2000R before V1.0.0-B20231213.1013 is vulnerable to Cross Site Scripting (XSS) via the VPN Page
Affected: before 1.0.0-b20231213.1013
CVE-2025-5543
4.8
0%
Jun 3
A vulnerability was found in TOTOLINK X2000R 1.0.0-B20230726.1108
Affected: 1.0.0-b20230726.1108
CVE-2025-5542
4.8
0%
Jun 3
A vulnerability was found in TOTOLINK X2000R 1.0.0-B20230726.1108
Affected: 1.0.0-b20230726.1108
CVE-2025-5516
4.8
0%
Jun 3
A vulnerability, which was classified as problematic, was found in TOTOLINK X2000R 1.0.0-B20230726.1108
Affected: 1.0.0-b20230726.1108
CVE-2024-33433
4.8
1%
May 14
Cross Site Scripting vulnerability in TOTOLINK X2000R before v1.0.0-B20231213.1013 allows a remote attacker to execute arbitrary code via the Guest Access Control parameter in the…
Affected: before 1.0.0-b20231213.1013
Showing 45