GCVE - cpe:2.3:o:totolink:x2000r_firmware:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:o:totolink:x2000r_firmware:*:*:*:*:*:*:*:*

part: o version: * update: *

Vendor	Totolink (`fa0129e6-aa24-5784-be77-22d8becdb79b`)
Product	X2000R Firmware (`2f4104dc-bdcf-5c93-bb35-35b131eb6cf3`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2024-33433`	vulnerable	2026-06-08 06:37:31.136577	Details available Cross Site Scripting vulnerability in TOTOLINK X2000R before v1.0.0-B20231213.1013 allows a remote attacker to execute arbitrary code via the Guest Access Control parameter in the Wireless Page. Published: 2024-05-13T19:56:22.474Z Updated: 2025-02-13T15:52:37.357Z Open on db.gcve.eu Reference links https://github.com/4hsien/CVE-vulns/blob/main/TOTOLINK/X2000R/XSS_2_Guest_Access_Control/README.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-29419`	vulnerable	2026-06-08 06:33:29.146723	Details available There is a Cross-site scripting (XSS) vulnerability in the Wireless settings under the Easy Setup Page of TOTOLINK X2000R before v1.0.0-B20231213.1013. Published: 2024-03-20T00:00:00.000Z Updated: 2025-03-27T20:33:26.772Z Open on db.gcve.eu Reference links https://www.totolink.net/home/menu/detail/menu_listtpl/products/id/242/ids/33.html https://github.com/4hsien/CVE-vulns/blob/main/TOTOLINK/X2000R/XSS_6_Wireless_settings/XSS.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-28404`	vulnerable	2026-06-08 06:33:26.962284	Details available TOTOLINK X2000R before V1.0.0-B20231213.1013 contains a Stored Cross-site scripting (XSS) vulnerability in MAC Filtering under the Firewall Page. Published: 2024-03-15T00:00:00.000Z Updated: 2024-08-14T19:53:32.009Z Open on db.gcve.eu Reference links https://www.totolink.net/home/menu/detail/menu_listtpl/products/id/242/ids/33.html https://github.com/4hsien/CVE-vulns/blob/main/TOTOLINK/X2000R/XSS_3_MAC_Filtering/XSS.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-28403`	vulnerable	2026-06-08 06:33:26.959794	Details available TOTOLINK X2000R before V1.0.0-B20231213.1013 is vulnerable to Cross Site Scripting (XSS) via the VPN Page. Published: 2024-03-15T00:00:00.000Z Updated: 2025-03-27T19:29:24.892Z Open on db.gcve.eu Reference links https://www.totolink.net/home/menu/detail/menu_listtpl/products/id/242/ids/33.html https://github.com/4hsien/CVE-vulns/blob/main/TOTOLINK/X2000R/XSS_5_VPN/XSS.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-28402`	vulnerable	2026-06-08 06:33:26.959392	Details available TOTOLINK X2000R before V1.0.0-B20231213.1013 contains a Stored Cross-site scripting (XSS) vulnerability in IP/Port Filtering under the Firewall Page. Published: 2024-03-21T00:00:00.000Z Updated: 2024-08-02T00:56:57.572Z Open on db.gcve.eu Reference links https://www.totolink.net/home/menu/detail/menu_listtpl/products/id/242/ids/33.html https://github.com/4hsien/CVE-vulns/blob/main/TOTOLINK/X2000R/XSS_4_IP_Port_Filtering/XSS.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-28401`	vulnerable	2026-06-08 06:33:26.957753	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.