CVE-2023-51133

TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formRoute

published December 30, 2023

CVSS
—
EPSS
1%
Percentile
50.0
In the wild
Unconfirmed
What it is

⚠️ A sneaky stack overflow is lurking in the TOTOLINK X2000R — it’s like a mischievous guest who overstays their welcome and wreaks havoc with the host's resources! Think of a stack overflow like a crowded restaurant where a waiter keeps bringing in more and more diners without taking any orders back. Eventually, the kitchen can't handle it anymore, and everything grinds to a halt! If exploited, this could lead to instability in the router's operation, potentially causing it to crash or behave unpredictably. While there’s no current evidence of exploitation, the risk of system failure is certainly something to keep an eye on.

Put simply

Think of a stack overflow like a crowded restaurant where a waiter keeps bringing in more and more diners without taking any orders back. Eventually, the kitchen can't handle it anymore, and everything grinds to a halt! This vulnerability in the TOTOLINK X2000R occurs in the formRoute function, where excessive recursive calls can overflow the stack, leading to a denial of service situation.

What to do

If exploited, this could lead to instability in the router's operation, potentially causing it to crash or behave unpredictably. While there’s no current evidence of exploitation, the risk of system failure is certainly something to keep an eye on. To mitigate this issue, it's crucial to update the firmware to the latest version provided by TOTOLINK. Regularly check for updates and ensure your devices are configured properly to minimize risks. You've got this! By taking these steps, you'll help keep your network secure and running smoothly. 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00644 · 50.0th percentile
Published
2023-12-30T00:00Z
EPSS history
Timeline
  • 30 DEC 00:00Z
    TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formRoute
    cvelistv5