CVE-2023-7208CWE-120

Totolink X2000R_V2 boa formTmultiAP buffer overflow

High · published January 7, 2024

CVSS v3.1
8.0
EPSS
2%
Percentile
77.6
In the wild
Unconfirmed
What it is

A vulnerability classified as critical was found in Totolink X2000R_V2 2.0.0-B20230727.10434. This vulnerability affects the function formTmultiAP of the file /bin/boa. The manipulation leads to buffer overflow. VDB-249742 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

The record
Technical detail
CVSS v3.1
8.0 · HIGH
Vector
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01747 · 77.6th percentile
Weakness
CWE-120 · Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
Published
2024-01-07T07:00Z
EPSS history
Timeline
  • 07 JAN 07:00Z
    Totolink X2000R_V2 boa formTmultiAP buffer overflow
    cvelistv5