TOTOLINK X2000R before V1.0.0-B20231213.1013 is vulnerable to Cross Site Scripting (XSS) via the VPN Page.
History

Mon, 10 Mar 2025 15:45:00 +0000

Type Values Removed Values Added
First Time appeared Totolink
Totolink x2000r
Totolink x2000r Firmware
Weaknesses CWE-79
CPEs cpe:2.3:h:totolink:x2000r:-:*:*:*:*:*:*:*
cpe:2.3:o:totolink:x2000r_firmware:*:*:*:*:*:*:*:*
Vendors & Products Totolink
Totolink x2000r
Totolink x2000r Firmware
Metrics cvssV3_1

{'score': 5.4, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N'}


cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2024-03-15T00:00:00

Updated: 2024-08-02T00:56:57.663Z

Reserved: 2024-03-08T00:00:00

Link: CVE-2024-28403

cve-icon Vulnrichment

Updated: 2024-08-02T00:56:57.663Z

cve-icon NVD

Status : Analyzed

Published: 2024-03-15T16:15:08.583

Modified: 2025-03-10T15:10:00.520

Link: CVE-2024-28403

cve-icon Redhat

No data.