XF
Product
X2000r Firmware
45
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 31High 4Medium 10Low 0
Watch
Add X2000r Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-22529 | 9.8 | Jan 25 | TOTOLINK X2000R_V2 V2.0.0-B20230727.10434 has a command injection vulnerability in the sub_449040 (handle function of formUploadFile) of /bin/boa Affected: 2.0.0-b20230727.10434 |
| CVE-2024-0579 | 9.8 | Jan 16 | A vulnerability classified as critical was found in Totolink X2000R 1.0.0-B20221212.1452 Affected: 1.0.0-b20221212.1452 |
| CVE-2023-7222 | 9.8 | Jan 9 | A vulnerability was found in Totolink X2000R 1.0.0-B20221212.1452 Affected: 1.0.0-b20221212.1452 |
| CVE-2023-7208 | 9.8 | Jan 7 | A vulnerability classified as critical was found in Totolink X2000R_V2 2.0.0-B20230727.10434 Affected: 2.0.0-b20230727.10434 |
| CVE-2023-51136 | 9.8 | Dec 30 | TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formRebootSchedule Affected: 1.0.0-b20230221.0948.web |
| CVE-2023-51135 | 9.8 | Dec 30 | TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formPasswordSetup Affected: 1.0.0-b20230221.0948.web |
| CVE-2023-51133 | 9.8 | Dec 30 | TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formRoute Affected: 1.0.0-b20230221.0948.web |
| CVE-2023-46564 | 9.8 | Oct 25 | TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formDMZ Affected: 1.0.0-b20230221.0948 |
| CVE-2023-46563 | 9.8 | Oct 25 | TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formIpQoS Affected: 1.0.0-b20230221.0948 |
| CVE-2023-46562 | 9.8 | Oct 25 | TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formDosCfg Affected: 1.0.0-b20230221.0948 |
| CVE-2023-46560 | 9.8 | Oct 25 | TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formTcpipSetup Affected: 1.0.0-b20230221.0948 |
| CVE-2023-46559 | 9.8 | Oct 25 | TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formIPv6Addr Affected: 1.0.0-b20230221.0948 |
| CVE-2023-46558 | 9.8 | Oct 25 | TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formMapDelDevice Affected: 1.0.0-b20230221.0948 |
| CVE-2023-46557 | 9.8 | Oct 25 | TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formMultiAPVLAN Affected: 1.0.0-b20230221.0948 |
| CVE-2023-46556 | 9.8 | Oct 25 | TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formFilter Affected: 1.0.0-b20230221.0948 |
| CVE-2023-46555 | 9.8 | Oct 25 | TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formPortFw Affected: 1.0.0-b20230221.0948 |
| CVE-2023-46554 | 9.8 | Oct 25 | TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formMapDel Affected: 1.0.0-b20230221.0948 |
| CVE-2023-46553 | 9.8 | Oct 25 | TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formParentControl Affected: 1.0.0-b20230221.0948 |
| CVE-2023-46552 | 9.8 | Oct 25 | TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formMultiAP Affected: 1.0.0-b20230221.0948 |
| CVE-2023-46551 | 9.8 | Oct 25 | TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formReflashClientTbl Affected: 1.0.0-b20230221.0948 |
| CVE-2023-46550 | 9.8 | Oct 25 | TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formMapDelDevice Affected: 1.0.0-b20230221.0948 |
| CVE-2023-46549 | 9.8 | Oct 25 | TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formSetLg Affected: 1.0.0-b20230221.0948 |
| CVE-2023-46548 | 9.8 | Oct 25 | TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formWlanRedirect Affected: 1.0.0-b20230221.0948 |
| CVE-2023-46547 | 9.8 | Oct 25 | TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formSysLog Affected: 1.0.0-b20230221.0948 |
| CVE-2023-46546 | 9.8 | Oct 25 | TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formStats Affected: 1.0.0-b20230221.0948 |
| CVE-2023-46545 | 9.8 | Oct 25 | TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formWsc Affected: 1.0.0-b20230221.0948 |
| CVE-2023-46544 | 9.8 | Oct 25 | TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formWirelessTbl Affected: 1.0.0-b20230221.0948 |
| CVE-2023-46543 | 9.8 | Oct 25 | TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formWlSiteSurvey Affected: 1.0.0-b20230221.0948 |
| CVE-2023-46542 | 9.8 | Oct 25 | TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formMeshUploadConfig Affected: 1.0.0-b20230221.0948 |
| CVE-2023-46541 | 9.8 | Oct 25 | TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formIpv6Setup Affected: 1.0.0-b20230221.0948 |
| CVE-2023-46540 | 9.8 | Oct 25 | TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formNtp Affected: 1.0.0-b20230221.0948 |
| CVE-2025-57579 | 8.0 | Sep 12 | An issue in TOTOLINK Wi-Fi 6 Router Series Device X2000R-Gh-V2.0.0 allows a remote attacker to execute arbitrary code via the default password Affected: 2.0.0-b20230727.1043.web |
| CVE-2024-28404 | 8.0 | Mar 15 | TOTOLINK X2000R before V1.0.0-B20231213.1013 contains a Stored Cross-site scripting (XSS) vulnerability in MAC Filtering under the Firewall Page Affected: before 1.0.0-b20231213.1013 |
| CVE-2025-8181 | 7.2 | Jul 26 | A vulnerability, which was classified as critical, was found in TOTOLINK N600R and X2000R 1.0.0.1 Affected: 1.0.0 |
| CVE-2025-9577 | 7.0 | Aug 28 | A security flaw has been discovered in TOTOLINK X2000R up to 2.0.0 Affected: 2.0.0-b20230727.1043.web |
| CVE-2025-5515 | 6.3 | Jun 3 | A vulnerability, which was classified as critical, has been found in TOTOLINK X2000R 1.0.0-B20230726.1108 Affected: 1.0.0-b20230726.1108 |
| CVE-2025-5504 | 6.3 | Jun 3 | A vulnerability has been found in TOTOLINK X2000R 1.0.0-B20230726.1108 and classified as critical Affected: 1.0.0-b20230726.1108 |
| CVE-2024-28402 | 5.9 | Apr 11 | TOTOLINK X2000R before V1.0.0-B20231213.1013 contains a Stored Cross-site scripting (XSS) vulnerability in IP/Port Filtering under the Firewall Page Affected: before 1.0.0-b20231213.1013 |
| CVE-2024-29419 | 5.4 | Mar 20 | There is a Cross-site scripting (XSS) vulnerability in the Wireless settings under the Easy Setup Page of TOTOLINK X2000R before v1.0.0-B20231213.1013 Affected: before 1.0.0-b20231213.1013 |
| CVE-2024-28401 | 5.4 | Mar 15 | TOTOLINK X2000R before v1.0.0-B20231213.1013 contains a Store Cross-site scripting (XSS) vulnerability in Root Access Control under the Wireless Page Affected: before 1.0.0-b20231213.1013 |
| CVE-2024-28403 | 5.4 | Mar 15 | TOTOLINK X2000R before V1.0.0-B20231213.1013 is vulnerable to Cross Site Scripting (XSS) via the VPN Page Affected: before 1.0.0-b20231213.1013 |
| CVE-2025-5543 | 4.8 | Jun 3 | A vulnerability was found in TOTOLINK X2000R 1.0.0-B20230726.1108 Affected: 1.0.0-b20230726.1108 |
| CVE-2025-5542 | 4.8 | Jun 3 | A vulnerability was found in TOTOLINK X2000R 1.0.0-B20230726.1108 Affected: 1.0.0-b20230726.1108 |
| CVE-2025-5516 | 4.8 | Jun 3 | A vulnerability, which was classified as problematic, was found in TOTOLINK X2000R 1.0.0-B20230726.1108 Affected: 1.0.0-b20230726.1108 |
| CVE-2024-33433 | 4.8 | May 14 | Cross Site Scripting vulnerability in TOTOLINK X2000R before v1.0.0-B20231213.1013 allows a remote attacker to execute arbitrary code via the Guest Access Control parameter in the… Affected: before 1.0.0-b20231213.1013 |
Showing 45
