
Vulnerabilities
Authenticated command injection in TOTOLINK X2000R firmware allows code execution
A critical OS command injection flaw in specific X2000R firmware versions enables arbitrary code execution via authenticated HTTP requests.
Everything AppSec Scoop has reported about firmware: 2 stories, newest first. Part of our Vulnerabilities coverage.

A critical OS command injection flaw in specific X2000R firmware versions enables arbitrary code execution via authenticated HTTP requests.

Multiple stack-based buffer overflows in the Totolink X2000R firmware allow authenticated remote code execution via crafted HTTP requests.