CVE-2023-46541

TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formIpv6Setup

High · published October 25, 2023

CVSS v3.1
8.8
EPSS
1%
Percentile
63.3
In the wild
Unconfirmed
What it is

⚡ A stack overflow lurking in the TOTOLINK X2000R's IPv6 setup function could turn your router into a playground for attackers! 🔥 Think of the stack overflow like a restaurant trying to serve too many customers in a limited space—eventually, it gets so crowded that it spills out into the street! The router’s function is overwhelmed, making it vulnerable to unwanted guests. If exploited, this vulnerability could allow attackers to crash the router or execute arbitrary code, potentially giving them control over your network. Imagine someone sneaking into your home and messing with your Wi-Fi settings—absolutely devastating!

Put simply

Think of the stack overflow like a restaurant trying to serve too many customers in a limited space—eventually, it gets so crowded that it spills out into the street! The router’s function is overwhelmed, making it vulnerable to unwanted guests. This vulnerability in the TOTOLINK X2000R v1.0.0-B20230221.0948.web occurs due to insufficient input validation in the formIpv6Setup function, leading to a stack overflow that could be triggered remotely without authentication.

What to do

If exploited, this vulnerability could allow attackers to crash the router or execute arbitrary code, potentially giving them control over your network. Imagine someone sneaking into your home and messing with your Wi-Fi settings—absolutely devastating! To protect your network, upgrade your TOTOLINK X2000R router to the latest firmware version as soon as it becomes available. Until then, consider disabling IPv6 if it’s not necessary for your setup. Regularly check for updates to stay ahead of any potential risks. You've got this! Stay vigilant, keep your firmware updated, and your network will be safe! 🛡️

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01027 · 63.3th percentile
Published
2023-10-25T00:00Z
EPSS history
Timeline
  • 25 OCT 00:00Z
    TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formIpv6Setup
    cvelistv5