CVE-2023-46543

TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formWlSiteSurvey

High · published October 25, 2023

CVSS v3.1
8.8
EPSS
1%
Percentile
63.3
In the wild
Unconfirmed
What it is

⚡ A stack overflow vulnerability is lurking in the TOTOLINK X2000R, and it’s not the kind of overflow you want in your network! 🔥 Think of this like a restaurant that keeps serving more and more food without checking if the plates can hold it — eventually, it all spills over, creating chaos! An attacker could exploit this to overflow the stack and potentially execute malicious code, leading to complete system compromise. This means they could take control of your router, intercept communications, and wreak havoc on your network!

Put simply

Think of this like a restaurant that keeps serving more and more food without checking if the plates can hold it — eventually, it all spills over, creating chaos! The vulnerability in the function formWlSiteSurvey allows for a stack overflow when input is processed improperly, potentially letting attackers run arbitrary code. That’s like leaving your front door wide open because the lock is faulty!

What to do

An attacker could exploit this to overflow the stack and potentially execute malicious code, leading to complete system compromise. This means they could take control of your router, intercept communications, and wreak havoc on your network! To mitigate this, update the firmware to version 1.0.0-B20230222.0949 or later immediately. Additionally, consider disabling remote management features until the patch is applied to reduce exposure. Security audits are a great way to check for other potential vulnerabilities! You've got this! Follow these steps and you'll have your network secured in no time! 🛡️

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01027 · 63.3th percentile
Published
2023-10-25T00:00Z
EPSS history
Timeline
  • 25 OCT 00:00Z
    TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formWlSiteSurvey
    cvelistv5