X2000R vulnerabilities

4 known vulnerabilities in X2000R from TOTOLINK. 4 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.0 High severity

  X2000R: Use of Default Credentials

  CVE-2025-9577Aug 28, 2025TOTOLINK

  A security flaw has been discovered in TOTOLINK X2000R up to 2.0.0. The affected element is an unknown function of the file /etc/shadow.sample of the component Administrative Interface. The manipulation results in use of default credentials. Attacking locally

• 7.2 High severity

  N600R: Incorrect Privilege Assignment

  CVE-2025-8181Jul 26, 2025TOTOLINKEPSS 1.12%

  A vulnerability, which was classified as critical, was found in TOTOLINK N600R and X2000R 1.0.0.1. This affects an unknown part of the file vsftpd.conf of the component FTP Service. The manipulation leads to least privilege violation. It is possible to initiat

• 9.8 Critical severity

  X2000R: Improper Neutralization of Special Elements in Output Used by a Downstream Component

  CVE-2024-0579Jan 16, 2024TOTOLINKEPSS 2.22%

  A vulnerability classified as critical was found in Totolink X2000R 1.0.0-B20221212.1452. Affected by this vulnerability is the function formMapDelDevice of the file /boafrm/formMapDelDevice. The manipulation of the argument macstr leads to command injection.

• 9.8 Critical severity

  X2000R: Out-of-bounds Write

  CVE-2023-7222Jan 9, 2024TOTOLINKEPSS 1.32%

  A vulnerability was found in Totolink X2000R 1.0.0-B20221212.1452. It has been declared as critical. This vulnerability affects the function formTmultiAP of the file /bin/boa of the component HTTP POST Request Handler. The manipulation of the argument submit-u