Stack Overflow Vulnerability in TOTOLINK X2000R Router
CVE-2023-46547

9.8CRITICAL

Key Information:

Vendor

Totolink
Status
X2000r Firmware
Vendor
CVE Published:
25 October 2023

What is CVE-2023-46547?

The TOTOLINK X2000R Router is susceptible to a stack overflow vulnerability caused by improper handling in the formSysLog function. This flaw allows attackers to manipulate the stack memory, potentially leading to arbitrary code execution and unauthorized access to sensitive information. Users are advised to review their firmware versions and apply necessary security patches to mitigate potential risks. For more detailed information, visit the official TOTOLINK website or consult community resources.

References

https://totolink.cn/home/menu/detail.html?menu_listtpl=do...
https://github.com/XYIYM/Digging/blob/main/TOTOLINK/X2000...

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.