What’s Vulnerable › Products

TOTOLINK X2000R vulnerabilities

45 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 8 published in the last 12 months.

Check whether your TOTOLINK X2000R version is affected

Latest TOTOLINK X2000R vulnerabilities

• CVE-2025-57579 — (CVSS 8.0)
• CVE-2025-9577 — TOTOLINK X2000R Administrative shadow.sample default credentials (CVSS 7.0)
• CVE-2025-8181 — TOTOLINK N600R/X2000R FTP Service vsftpd.conf least privilege violation (CVSS 7.2)
• CVE-2025-5543 — TOTOLINK X2000R Parent Controls Page cross site scripting (CVSS 4.8)
• CVE-2025-5542 — TOTOLINK X2000R Virtual Server Page formPortFw cross site scripting (CVSS 4.8)
• CVE-2025-5516 — TOTOLINK X2000R URL Filtering Page formFilter cross site scripting (CVSS 4.8)
• CVE-2025-5515 — TOTOLINK X2000R formMapDel command injection (CVSS 6.3)
• CVE-2025-5504 — TOTOLINK X2000R formWsc command injection (CVSS 6.3)
• CVE-2024-33433 — (CVSS 4.8)
• CVE-2024-28402 — (CVSS 5.9)
• CVE-2024-29419 — (CVSS 5.4)
• CVE-2024-28404 — (CVSS 8.0)
• CVE-2024-28401 — (CVSS 5.4)
• CVE-2024-28403 — (CVSS 5.4)
• CVE-2024-22529 — (CVSS 9.8)
• CVE-2024-0579 — Totolink X2000R formMapDelDevice command injection (CVSS 9.8)
• CVE-2023-7222 — Totolink X2000R HTTP POST Request boa formTmultiAP buffer overflow (CVSS 9.8)
• CVE-2023-7208 — Totolink X2000R_V2 boa formTmultiAP buffer overflow (CVSS 9.8)
• CVE-2023-51136 — (CVSS 9.8)
• CVE-2023-51135 — (CVSS 9.8)
• CVE-2023-51133 — (CVSS 9.8)
• CVE-2023-46564 — (CVSS 9.8)
• CVE-2023-46563 — (CVSS 9.8)
• CVE-2023-46562 — (CVSS 9.8)
• CVE-2023-46560 — (CVSS 9.8)