X2000r firmware

This hub aggregates every CVE we track for X2000r firmware, a product in the networking infrastructure space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 15 most recently published vulnerabilities affecting X2000r firmware.

• CVE-2025-57579An issue in TOTOLINK Wi-Fi 6 Router Series Device X2000R-Gh-V2.0.0 allows a remote attacker to execute arbitrary code via the default password8.0Sep 12, 2025
• CVE-2025-9577TOTOLINK X2000R Administrative shadow.sample default credentials2.5Aug 28, 2025
• CVE-2025-8181TOTOLINK N600R/X2000R FTP Service vsftpd.conf least privilege violation7.2Jul 26, 2025
• CVE-2025-5543TOTOLINK X2000R Parent Controls Page cross site scripting2.4Jun 3, 2025
• CVE-2025-5542TOTOLINK X2000R Virtual Server Page formPortFw cross site scripting2.4Jun 3, 2025
• CVE-2025-5516TOTOLINK X2000R URL Filtering Page formFilter cross site scripting2.4Jun 3, 2025
• CVE-2025-5515TOTOLINK X2000R formMapDel command injection6.3Jun 3, 2025
• CVE-2025-5504TOTOLINK X2000R formWsc command injection6.3Jun 3, 2025
• CVE-2024-33433Cross Site Scripting vulnerability in TOTOLINK X2000R before v1.0.0-B20231213.1013 allows a remote attacker to execute arbitrary code via the Guest Access Control parameter in the Wireless Page.4.8May 13, 2024
• CVE-2024-28402TOTOLINK X2000R before V1.0.0-B20231213.1013 contains a Stored Cross-site scripting (XSS) vulnerability in IP/Port Filtering under the Firewall Page.5.9Mar 21, 2024
• CVE-2024-29419There is a Cross-site scripting (XSS) vulnerability in the Wireless settings under the Easy Setup Page of TOTOLINK X2000R before v1.0.0-B20231213.1013.5.4Mar 20, 2024
• CVE-2024-28401TOTOLINK X2000R before v1.0.0-B20231213.1013 contains a Store Cross-site scripting (XSS) vulnerability in Root Access Control under the Wireless Page.5.4Mar 15, 2024
• CVE-2024-28403TOTOLINK X2000R before V1.0.0-B20231213.1013 is vulnerable to Cross Site Scripting (XSS) via the VPN Page.5.4Mar 15, 2024
• CVE-2024-28404TOTOLINK X2000R before V1.0.0-B20231213.1013 contains a Stored Cross-site scripting (XSS) vulnerability in MAC Filtering under the Firewall Page.8.0Mar 15, 2024
• CVE-2024-22529TOTOLINK X2000R_V2 V2.0.0-B20230727.10434 has a command injection vulnerability in the sub_449040 (handle function of formUploadFile) of /bin/boa.9.8Jan 25, 2024