TOTOLINK X2000R
9 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2025-9577 | 2.0 | TOTOLINK X2000R Administrative shadow.sample default credentials | LOW 2.0 | 0.2 % | ||
| CVE-2025-8181 | 1.0.0.1 | TOTOLINK N600R/X2000R FTP Service vsftpd.conf least privilege violation | HIGH 8.6 | 1.1 % | ||
| CVE-2025-5543 | 1.0.0-B20230726.1108 | TOTOLINK X2000R Parent Controls Page cross site scripting | MEDIUM 4.8 | 0.3 % | ||
| CVE-2025-5542 | 1.0.0-B20230726.1108 | TOTOLINK X2000R Virtual Server Page formPortFw cross site scripting | MEDIUM 4.8 | 0.3 % | ||
| CVE-2025-5516 | 1.0.0-B20230726.1108 | TOTOLINK X2000R URL Filtering Page formFilter cross site scripting | MEDIUM 4.8 | 0.4 % | ||
| CVE-2025-5515 | 1.0.0-B20230726.1108 | TOTOLINK X2000R formMapDel command injection | MEDIUM 5.3 | 3.4 % | ||
| CVE-2025-5504 | 1.0.0-B20230726.1108 | TOTOLINK X2000R formWsc command injection | MEDIUM 5.3 | 14 % | ||
| CVE-2024-0579 | 1.0.0-B20221212.1452 | Totolink X2000R formMapDelDevice command injection | MEDIUM 5.3 | 2.2 % | ||
| CVE-2023-7222 | 1.0.0-B20221212.1452 | Totolink X2000R HTTP POST Request boa formTmultiAP buffer overflow | CRITICAL 9.8 | 1.3 % |