TOTOLINK

Records1322All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical616CVSS 9.0–10.0

CVSS high434CVSS 7.0–8.9

Exploited now

TOTOLINK records in CISA KEV

No TOTOLINK vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

X5000r Firmware 70 records HIGH A3300r Firmware 64 records HIGH A3002r Firmware 61 records HIGH X6000r Firmware 57 records HIGH A3002ru Firmware 49 records HIGH A3100r Firmware 47 records HIGH X2000r Firmware 45 records HIGH A3700r Firmware 43 records CRITICAL

Records

45 records in X2000r Firmware · all components

TI-2025-35575 CVE-2025-57579 · GHSA-fv6j-75mv-78gq

An issue in TOTOLINK Wi-Fi 6 Router Series Device X2000R-Gh-V2.0.0 allows a remote…

HIGH 70

An issue in TOTOLINK Wi-Fi 6 Router Series Device X2000R-Gh-V2.0.0 allows a remote attacker to execute arbitrary code via the default password

CVSS 3.1HIGH 8.0 Network Low privileges User interaction EPSS 0.00608 Published 2025-09-12 No fix listed CWE-798

TI-2024-18864 CVE-2024-28404 · GHSA-h54h-77gg-v4vm

TOTOLINK X2000R before V1.0.0-B20231213.1013 contains a Stored Cross-site scripting (XSS)…

HIGH 68

TOTOLINK X2000R before V1.0.0-B20231213.1013 contains a Stored Cross-site scripting (XSS) vulnerability in MAC Filtering under the Firewall Page.

CVSS 3.1HIGH 8.0 Adjacent network No auth User interaction EPSS 0.0048 Published 2024-03-15 No fix listed CWE-79

TI-2024-18862 CVE-2024-28402 · GHSA-x5qq-mm82-fv4j

TOTOLINK X2000R before V1.0.0-B20231213.1013 contains a Stored Cross-site scripting (XSS)…

MEDIUM 60

TOTOLINK X2000R before V1.0.0-B20231213.1013 contains a Stored Cross-site scripting (XSS) vulnerability in IP/Port Filtering under the Firewall Page.

CVSS 3.1MEDIUM 5.9 Adjacent network Low privileges User interaction EPSS 0.00428 Published 2024-03-21 No fix listed CWE-79

TI-2025-04955 CVE-2025-5515 · GHSA-7pcg-pjpf-rf23

TOTOLINK X2000R formMapDel command injection

MEDIUM 57

A vulnerability, which was classified as critical, has been found in TOTOLINK X2000R 1.0.0-B20230726.1108.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.03441 Published 2025-06-03 No fix listed CWE-74

TI-2025-04944 CVE-2025-5504 · GHSA-j9x6-j7hr-4vpf

TOTOLINK X2000R formWsc command injection

MEDIUM 57

A vulnerability has been found in TOTOLINK X2000R 1.0.0-B20230726.1108 and classified as critical.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.13953 Published 2025-06-03 No fix listed CWE-74

TI-2025-04983 CVE-2025-5543 · GHSA-9xf4-53cr-j936

TOTOLINK X2000R Parent Controls Page cross site scripting

MEDIUM 55

A vulnerability was found in TOTOLINK X2000R 1.0.0-B20230726.1108.

CVSS 4.0MEDIUM 4.8 Network High privileges User interaction EPSS 0.00346 Published 2025-06-03 No fix listed CWE-79

TI-2025-04982 CVE-2025-5542 · GHSA-r4gf-vjqx-5r7p

TOTOLINK X2000R Virtual Server Page formPortFw cross site scripting

MEDIUM 55

A vulnerability was found in TOTOLINK X2000R 1.0.0-B20230726.1108.

CVSS 4.0MEDIUM 4.8 Network High privileges User interaction EPSS 0.00344 Published 2025-06-03 No fix listed CWE-79

TI-2025-04956 CVE-2025-5516 · GHSA-r8gp-c62w-m7jr

TOTOLINK X2000R URL Filtering Page formFilter cross site scripting

MEDIUM 55

A vulnerability, which was classified as problematic, was found in TOTOLINK X2000R 1.0.0-B20230726.1108.

CVSS 4.0MEDIUM 4.8 Network High privileges User interaction EPSS 0.00371 Published 2025-06-03 No fix listed CWE-79

TI-2024-22061 CVE-2024-33433 · GHSA-mw95-jjmc-q5f9

Cross Site Scripting vulnerability in TOTOLINK X2000R before v1.0.0-B20231213.1013 allows…

MEDIUM 55

Cross Site Scripting vulnerability in TOTOLINK X2000R before v1.0.0-B20231213.1013 allows a remote attacker to execute arbitrary code via the Guest Access Control parameter in the Wireless Page.

CVSS 3.1MEDIUM 4.8 Adjacent network Low privileges User interaction EPSS 0.00633 Published 2024-05-13 No fix listed CWE-233

TI-2023-25073 CVE-2023-46551 · GHSA-qfgh-5h7f-2r9r

TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow…

MEDIUM 51

TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formReflashClientTbl.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01006 Published 2023-10-25 No fix listed CWE-787

TI-2023-25072 CVE-2023-46550 · GHSA-4wjh-xmxc-5vrf

TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow…

MEDIUM 51

TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formMapDelDevice.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01006 Published 2023-10-25 No fix listed CWE-787

TI-2023-25071 CVE-2023-46549 · GHSA-4wc6-gwjp-2474

TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formSetLg.

MEDIUM 51

TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formSetLg.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01006 Published 2023-10-25 No fix listed CWE-787

TI-2023-25070 CVE-2023-46548 · GHSA-mm2j-j435-wg8g

TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow…

MEDIUM 51

TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formWlanRedirect.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01006 Published 2023-10-25 No fix listed CWE-787

TI-2023-25069 CVE-2023-46547 · GHSA-jr3x-9mc3-xx67

TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formSysLog.

MEDIUM 51

TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formSysLog.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01281 Published 2023-10-25 No fix listed CWE-787

TI-2023-25068 CVE-2023-46546 · GHSA-wqvc-mx3w-fwj5

TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formStats.

MEDIUM 51

TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formStats.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01281 Published 2023-10-25 No fix listed CWE-787

TI-2023-25067 CVE-2023-46545 · GHSA-6c33-h44r-qmjm

TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formWsc.

MEDIUM 51

TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formWsc.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01281 Published 2023-10-25 No fix listed CWE-787

TI-2023-27946 CVE-2023-51133 · GHSA-9mf6-c749-mf3h

TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formRoute.

MEDIUM 50

TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formRoute.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00644 Published 2023-12-30 No fix listed CWE-787

TI-2024-15053 CVE-2024-22529 · GHSA-rx6w-gc3r-2fh2

TOTOLINK X2000R_V2 V2.0.0-B20230727.10434 has a command injection vulnerability in the…

MEDIUM 46

TOTOLINK X2000R_V2 V2.0.0-B20230727.10434 has a command injection vulnerability in the sub_449040 (handle function of formUploadFile) of /bin/boa.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0173 Published 2024-01-25 No fix listed CWE-77

TI-2023-06606 CVE-2023-7222 · GHSA-jjvf-rww2-493v

Totolink X2000R HTTP POST Request boa formTmultiAP buffer overflow

MEDIUM 46

A vulnerability was found in Totolink X2000R 1.0.0-B20221212.1452.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0132 Published 2024-01-09 No fix listed CWE-120

TI-2023-06593 CVE-2023-7208 · GHSA-cvvm-x945-2wwp

Totolink X2000R_V2 boa formTmultiAP buffer overflow

MEDIUM 46

A vulnerability classified as critical was found in Totolink X2000R_V2 2.0.0-B20230727.10434.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01747 Published 2024-01-07 No fix listed CWE-120

TI-2023-25085 CVE-2023-46564 · GHSA-j2q7-6q2x-2q9p

TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formDMZ.

MEDIUM 45

TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formDMZ.