https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-20T15:40:55.415830+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2023-7222 CVE-2023-7222 — Totolink X2000R HTTP POST Request boa formTmultiAP buffer overflow 2026-10-20T15:40:55.417486+00:00

Affected: Totolink X2000R

A vulnerability was found in Totolink X2000R 1.0.0-B20221212.1452. It has been declared as critical. This vulnerability affects the function formTmultiAP of the file /bin/boa of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-249856. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.