Vulnerabilities
CVSS 9.1 Flaw Enables Remote Code Execution on Totolink X2000R Routers
An authenticated command injection vulnerability in Totolink X2000R firmware allows attackers to execute arbitrary code on the device via crafted HTTP requests.
X2000R
Everything Firewall Scoop has reported about X2000R: 2 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
CVSS 9.1: Critical Authenticated RCE in Totolink X2000R via boa pppoe Stack Overflow, No Patch Yet
Authenticated attackers can execute arbitrary code via stack-based buffer overflows in the Totolink X2000R web interface. No patch is currently available.