CVE-2023-46559

TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formIPv6Addr

High · published October 25, 2023

CVSS v3.1
8.0
EPSS
1%
Percentile
56.4
In the wild
Unconfirmed
What it is

⚡ A sneaky stack overflow is lurking in the TOTOLINK X2000R! This issue can be triggered through a vulnerable function—formIPv6Addr—making it a high-risk catch for savvy attackers. 🔥 Think of it like an overpacked suitcase that bursts open at the airport — too much information and suddenly everything spills out! Here, the stack overflow could allow attackers to exploit the excess baggage, potentially taking control of your device. If an attacker exploits this vulnerability, they could crash the device or even execute arbitrary code, resulting in unauthorized access and control. This could lead to a complete compromise of your network, making it a critical issue to address immediately. Don't let your device become a playground for malicious actors!

Put simply

Think of it like an overpacked suitcase that bursts open at the airport — too much information and suddenly everything spills out! Here, the stack overflow could allow attackers to exploit the excess baggage, potentially taking control of your device. This stack overflow vulnerability in the TOTOLINK X2000R occurs within the formIPv6Addr function, allowing attackers to send specially crafted input that exceeds the buffer size, leading to unpredictable behavior.

What to do

If an attacker exploits this vulnerability, they could crash the device or even execute arbitrary code, resulting in unauthorized access and control. This could lead to a complete compromise of your network, making it a critical issue to address immediately. Don't let your device become a playground for malicious actors! To safeguard your system, patch your device to version 1.0.0-B20230221.0948 or later as soon as possible. Additionally, consider disabling remote management and strengthen your firewall settings to bolster security. 🚀 You've got this! Follow these steps to lock down your device and enhance your security posture. 🛡️

The record
Technical detail
CVSS v3.1
8.0 · HIGH
Vector
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00807 · 56.4th percentile
Published
2023-10-25T00:00Z
EPSS history
Timeline
  • 25 OCT 00:00Z
    TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formIPv6Addr
    cvelistv5