X2000r

This hub aggregates every CVE we track for X2000r, a product in the networking infrastructure space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 13 most recently published vulnerabilities affecting X2000r.

• CVE-2025-57579An issue in TOTOLINK Wi-Fi 6 Router Series Device X2000R-Gh-V2.0.0 allows a remote attacker to execute arbitrary code via the default password8.0Sep 12, 2025
• CVE-2025-9577TOTOLINK X2000R Administrative shadow.sample default credentials2.5Aug 28, 2025
• CVE-2025-8181TOTOLINK N600R/X2000R FTP Service vsftpd.conf least privilege violation7.2Jul 26, 2025
• CVE-2025-5543TOTOLINK X2000R Parent Controls Page cross site scripting2.4Jun 3, 2025
• CVE-2025-5542TOTOLINK X2000R Virtual Server Page formPortFw cross site scripting2.4Jun 3, 2025
• CVE-2025-5516TOTOLINK X2000R URL Filtering Page formFilter cross site scripting2.4Jun 3, 2025
• CVE-2025-5515TOTOLINK X2000R formMapDel command injection6.3Jun 3, 2025
• CVE-2025-5504TOTOLINK X2000R formWsc command injection6.3Jun 3, 2025
• CVE-2024-28401TOTOLINK X2000R before v1.0.0-B20231213.1013 contains a Store Cross-site scripting (XSS) vulnerability in Root Access Control under the Wireless Page.5.4Mar 15, 2024
• CVE-2024-28403TOTOLINK X2000R before V1.0.0-B20231213.1013 is vulnerable to Cross Site Scripting (XSS) via the VPN Page.5.4Mar 15, 2024
• CVE-2024-28404TOTOLINK X2000R before V1.0.0-B20231213.1013 contains a Stored Cross-site scripting (XSS) vulnerability in MAC Filtering under the Firewall Page.8.0Mar 15, 2024
• CVE-2024-0579Totolink X2000R formMapDelDevice command injection6.3Jan 16, 2024
• CVE-2023-7222Totolink X2000R HTTP POST Request boa formTmultiAP buffer overflow7.2Jan 9, 2024