Totolink X2000R Firmware vulnerabilities
45 known vulnerabilities affecting totolink/x2000r_firmware.
Total CVEs
45
CISA KEV
0
Public exploits
1
Exploited in wild
1
Severity breakdown
CRITICAL31HIGH4MEDIUM10
Vulnerabilities
Page 3 of 3
CVE-2025-5543P4MEDIUMCVSS 4.8v1.0.0-b20230726.11082025-06-03
CVE-2025-5543 [MEDIUM] CWE-79 CVE-2025-5543: A vulnerability was found in TOTOLINK X2000R 1.0.0-B20230726.1108. It has been declared as problemat
A vulnerability was found in TOTOLINK X2000R 1.0.0-B20230726.1108. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the component Parent Controls Page. The manipulation of the argument Device Name leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the p
nvd
CVE-2024-29419P4MEDIUMCVSS 5.4fixed in 1.0.0-b20231213.10132024-03-20
CVE-2024-29419 [MEDIUM] CWE-79 CVE-2024-29419: There is a Cross-site scripting (XSS) vulnerability in the Wireless settings under the Easy Setup Pa
There is a Cross-site scripting (XSS) vulnerability in the Wireless settings under the Easy Setup Page of TOTOLINK X2000R before v1.0.0-B20231213.1013.
nvd
CVE-2024-28403P4MEDIUMCVSS 5.4fixed in 1.0.0-b20231213.10132024-03-15
CVE-2024-28403 [MEDIUM] CWE-79 CVE-2024-28403: TOTOLINK X2000R before V1.0.0-B20231213.1013 is vulnerable to Cross Site Scripting (XSS) via the VPN
TOTOLINK X2000R before V1.0.0-B20231213.1013 is vulnerable to Cross Site Scripting (XSS) via the VPN Page.
nvd
CVE-2024-28402P4MEDIUMCVSS 5.9fixed in 1.0.0-b20231213.10132024-04-11
CVE-2024-28402 [MEDIUM] CWE-79 CVE-2024-28402: TOTOLINK X2000R before V1.0.0-B20231213.1013 contains a Stored Cross-site scripting (XSS) vulnerabil
TOTOLINK X2000R before V1.0.0-B20231213.1013 contains a Stored Cross-site scripting (XSS) vulnerability in IP/Port Filtering under the Firewall Page.
nvd
CVE-2024-33433P4MEDIUMCVSS 4.8fixed in 1.0.0-b20231213.10132024-05-14
CVE-2024-33433 [MEDIUM] CWE-233 CVE-2024-33433: Cross Site Scripting vulnerability in TOTOLINK X2000R before v1.0.0-B20231213.1013 allows a remote a
Cross Site Scripting vulnerability in TOTOLINK X2000R before v1.0.0-B20231213.1013 allows a remote attacker to execute arbitrary code via the Guest Access Control parameter in the Wireless Page.
nvd
← Previous3 / 3