CVE-2023-46544

TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formWirelessTbl

High · published October 25, 2023

CVSS v3.1
8.8
EPSS
1%
Percentile
63.3
In the wild
Unconfirmed
What it is

⚡ A stack overflow in the TOTOLINK X2000R can turn your router into a ticking time bomb! 💣 Think of it like a coffee shop where the barista keeps pouring coffee into a cup without realizing it’s overflowing. Eventually, it spills everywhere, causing chaos and a big mess! If exploited, an attacker could crash the router, disrupt your home network, and potentially execute harmful code remotely. This could lead to your personal data being at risk, turning your comfortable browsing into a nightmare scenario.

Put simply

Think of it like a coffee shop where the barista keeps pouring coffee into a cup without realizing it’s overflowing. Eventually, it spills everywhere, causing chaos and a big mess! The vulnerability arises from a stack overflow in the function formWirelessTbl, which fails to properly handle input sizes, allowing attackers to manipulate the stack beyond its limits.

What to do

If exploited, an attacker could crash the router, disrupt your home network, and potentially execute harmful code remotely. This could lead to your personal data being at risk, turning your comfortable browsing into a nightmare scenario. It's crucial to update to the latest firmware version immediately to patch this vulnerability. Additionally, consider auditing your router’s settings and restricting access to trusted devices only. You've got this! With a quick update, you can fortify your network and keep those pesky intruders at bay! 🛡️

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01027 · 63.3th percentile
Published
2023-10-25T00:00Z
EPSS history
Timeline
  • 25 OCT 00:00Z
    TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formWirelessTbl
    cvelistv5