Vulnerability · Published Jan 7, 2024 · Assigned by VulDB
CVE-2023-7208Totolink X2000R_V2 boa formTmultiAP buffer overflow
High 8.0
In plain English
A high-severity buffer overflow in X2000R_V2 from Totolink. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.7% (higher than 78% of all known vulnerabilities).
Severity (CVSS 3.1)8.0High
Exploit odds (30 days)1.7%top 22.1% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
A vulnerability classified as critical was found in Totolink X2000R_V2 2.0.0-B20230727.10434. This vulnerability affects the function formTmultiAP of the file /bin/boa. The manipulation leads to buffer overflow. VDB-249742 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Affected products (as reported)
Weakness: CWE-120 · Vector: CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
References
- https://vuldb.com/?id.249742 vdb-entry, technical-description
- https://vuldb.com/?ctiid.249742 signature, permissions-required
- https://github.com/unpWn4bL3/iot-security/blob/main/13.md related