Totolink X2000R Firmware vulnerabilities
45 known vulnerabilities affecting totolink/x2000r_firmware.
Total CVEs
45
CISA KEV
0
Public exploits
0
Exploited in wild
1
Severity breakdown
CRITICAL31HIGH4MEDIUM10
Vulnerabilities
Page 3 of 3
CVE-2024-28401P4MEDIUMCVSS 5.4fixed in 1.0.0-b20231213.10132024-03-15
CVE-2024-28401 [MEDIUM] CWE-79 CVE-2024-28401: TOTOLINK X2000R before v1.0.0-B20231213.1013 contains a Store Cross-site scripting (XSS) vulnerabili
TOTOLINK X2000R before v1.0.0-B20231213.1013 contains a Store Cross-site scripting (XSS) vulnerability in Root Access Control under the Wireless Page.
nvd
CVE-2024-29419P4MEDIUMCVSS 5.4fixed in 1.0.0-b20231213.10132024-03-20
CVE-2024-29419 [MEDIUM] CWE-79 CVE-2024-29419: There is a Cross-site scripting (XSS) vulnerability in the Wireless settings under the Easy Setup Pa
There is a Cross-site scripting (XSS) vulnerability in the Wireless settings under the Easy Setup Page of TOTOLINK X2000R before v1.0.0-B20231213.1013.
nvd
CVE-2024-28403P4MEDIUMCVSS 5.4fixed in 1.0.0-b20231213.10132024-03-15
CVE-2024-28403 [MEDIUM] CWE-79 CVE-2024-28403: TOTOLINK X2000R before V1.0.0-B20231213.1013 is vulnerable to Cross Site Scripting (XSS) via the VPN
TOTOLINK X2000R before V1.0.0-B20231213.1013 is vulnerable to Cross Site Scripting (XSS) via the VPN Page.
nvd
CVE-2024-28402P4MEDIUMCVSS 5.9fixed in 1.0.0-b20231213.10132024-04-11
CVE-2024-28402 [MEDIUM] CWE-79 CVE-2024-28402: TOTOLINK X2000R before V1.0.0-B20231213.1013 contains a Stored Cross-site scripting (XSS) vulnerabil
TOTOLINK X2000R before V1.0.0-B20231213.1013 contains a Stored Cross-site scripting (XSS) vulnerability in IP/Port Filtering under the Firewall Page.
nvd
CVE-2024-33433P4MEDIUMCVSS 4.8fixed in 1.0.0-b20231213.10132024-05-14
CVE-2024-33433 [MEDIUM] CWE-233 CVE-2024-33433: Cross Site Scripting vulnerability in TOTOLINK X2000R before v1.0.0-B20231213.1013 allows a remote a
Cross Site Scripting vulnerability in TOTOLINK X2000R before v1.0.0-B20231213.1013 allows a remote attacker to execute arbitrary code via the Guest Access Control parameter in the Wireless Page.
nvd
← Previous3 / 3