Login Request a demo
XF
Product
X2000r Firmware
by Totolink · last CVE Sep 12, 2025
45
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities45In the news0Timeline
Severity mix
Critical 31High 4Medium 10Low 0
Severity
All severities45Critical31High4Medium10Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add X2000r Firmware to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-5515
6.3
3%
Jun 3
TOTOLINK X2000R formMapDel command injection
Affected: 1.0.0-b20230726.1108
CVE-2025-5504
6.3
13%
Jun 3
TOTOLINK X2000R formWsc command injection
Affected: 1.0.0-b20230726.1108
CVE-2024-28402
5.9
0%
Apr 11
TOTOLINK X2000R before V1.0.0-B20231213.1013 contains a Stored Cross-site scripting (XSS) vulnerability in IP/Port Filtering under the Firewall Page
Affected: before 1.0.0-b20231213.1013
CVE-2024-29419
5.4
0%
Mar 20
There is a Cross-site scripting (XSS) vulnerability in the Wireless settings under the Easy Setup Page of TOTOLINK X2000R before v1.0.0-B20231213.1013
Affected: before 1.0.0-b20231213.1013
CVE-2024-28401
5.4
0%
Mar 15
TOTOLINK X2000R before v1.0.0-B20231213.1013 contains a Store Cross-site scripting (XSS) vulnerability in Root Access Control under the Wireless Page
Affected: before 1.0.0-b20231213.1013
CVE-2024-28403
5.4
0%
Mar 15
TOTOLINK X2000R before V1.0.0-B20231213.1013 is vulnerable to Cross Site Scripting (XSS) via the VPN Page
Affected: before 1.0.0-b20231213.1013
CVE-2025-5543
4.8
0%
Jun 3
TOTOLINK X2000R Parent Controls Page cross site scripting
Affected: 1.0.0-b20230726.1108
CVE-2025-5542
4.8
0%
Jun 3
TOTOLINK X2000R Virtual Server Page formPortFw cross site scripting
Affected: 1.0.0-b20230726.1108
CVE-2025-5516
4.8
0%
Jun 3
TOTOLINK X2000R URL Filtering Page formFilter cross site scripting
Affected: 1.0.0-b20230726.1108
CVE-2024-33433
4.8
1%
May 14
Cross Site Scripting vulnerability in TOTOLINK X2000R before v1.0.0-B20231213.1013 allows a remote attacker to execute arbitrary code via the Guest Access Control parameter in the…
Affected: before 1.0.0-b20231213.1013
Showing 10