TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formReflashClientTbl.
References
Link | Resource |
---|---|
https://github.com/XYIYM/Digging/blob/main/TOTOLINK/X2000R/2/1.md | Exploit Third Party Advisory |
https://totolink.cn/home/menu/detail.html?menu_listtpl=download&id=85&ids=36 | Product |
https://github.com/XYIYM/Digging/blob/main/TOTOLINK/X2000R/2/1.md | Exploit Third Party Advisory |
https://totolink.cn/home/menu/detail.html?menu_listtpl=download&id=85&ids=36 | Product |
Configurations
Configuration 1 (hide)
AND |
|
History
21 Nov 2024, 08:28
Type | Values Removed | Values Added |
---|---|---|
References | () https://github.com/XYIYM/Digging/blob/main/TOTOLINK/X2000R/2/1.md - Exploit, Third Party Advisory | |
References | () https://totolink.cn/home/menu/detail.html?menu_listtpl=download&id=85&ids=36 - Product |
01 Nov 2023, 18:01
Type | Values Removed | Values Added |
---|---|---|
CWE | CWE-787 | |
First Time |
Totolink
Totolink x2000r Firmware Totolink x2000r |
|
References | (MISC) https://github.com/XYIYM/Digging/blob/main/TOTOLINK/X2000R/2/1.md - Exploit, Third Party Advisory | |
References | (MISC) https://totolink.cn/home/menu/detail.html?menu_listtpl=download&id=85&ids=36 - Product | |
CPE | cpe:2.3:o:totolink:x2000r_firmware:1.0.0-b20230221.0948:*:*:*:*:*:*:* cpe:2.3:h:totolink:x2000r:-:*:*:*:*:*:*:* |
|
CVSS |
v2 : v3 : |
v2 : unknown
v3 : 9.8 |
25 Oct 2023, 18:17
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2023-10-25 18:17
Updated : 2024-11-21 08:28
NVD link : CVE-2023-46551
Mitre link : CVE-2023-46551
CVE.ORG link : CVE-2023-46551
JSON object : View
Products Affected
totolink
- x2000r
- x2000r_firmware
CWE
CWE-787
Out-of-bounds Write