Vulnerabilities
CVSS 9.1: Authenticated HTTP Stack Overflow Enables RCE on TOTOLINK-X2000R Router Firmware
A stack-based buffer overflow in the batchupg feature of this router model permits arbitrary code execution via authenticated HTTP requests.
TOTOLINK
Everything Firewall Scoop has reported about TOTOLINK: 3 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
CVSS 9.1 Flaw Enables Remote Code Execution on Totolink X2000R Routers
An authenticated command injection vulnerability in Totolink X2000R firmware allows attackers to execute arbitrary code on the device via crafted HTTP requests.
Vulnerabilities
CVSS 9.1: Critical Authenticated RCE in Totolink X2000R via boa pppoe Stack Overflow, No Patch Yet
Authenticated attackers can execute arbitrary code via stack-based buffer overflows in the Totolink X2000R web interface. No patch is currently available.