- Products & ServicesProducts & Services
- SolutionsSolutions
- PricingPricing
- CompanyCompany
- ResourcesResources
en
en
A short verification protects source data and prevents automated AI requests.
Verifying...
As of 11/06/2026, X2000R recorded 0 security vulnerabilities in the last 90 days, of which 0 are rated High or Critical. None of these vulnerabilities is actively exploited (KEV) according to CISA's catalog. CyStack recommends that organizations and individual users apply patches as soon as possible.
CyStack does not yet have sufficient official-source data to identify the latest version of X2000R and determine which vulnerabilities affect that version.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
CVE-2025-9577TOTOLINK X2000R Administrative shadow.sample default credentialsCVE-2025-8181TOTOLINK N600R/X2000R FTP Service vsftpd.conf least privilege violationCVE-2025-5543TOTOLINK X2000R Parent Controls Page cross site scriptingCVE-2025-5542TOTOLINK X2000R Virtual Server Page formPortFw cross site scriptingCVE-2025-5516TOTOLINK X2000R URL Filtering Page formFilter cross site scripting| Vulnerability | Exploitation status | Fix | Published | Severity |
|---|---|---|---|---|
CVE-2025-9577TOTOLINK X2000R Administrative shadow.sample default credentials | Exploitation statusActively exploited | FixNo | Published08/28/2025 | SeverityLow |
CVE-2025-8181TOTOLINK N600R/X2000R FTP Service vsftpd.conf least privilege violation | Exploitation statusNot exploited | FixNo | Published07/26/2025 | SeverityHigh |
CVE-2025-5543TOTOLINK X2000R Parent Controls Page cross site scripting | Exploitation statusActively exploited | FixNo | Published06/03/2025 | SeverityMedium |
CVE-2025-5542TOTOLINK X2000R Virtual Server Page formPortFw cross site scripting | Exploitation statusActively exploited | FixNo | Published06/03/2025 | SeverityMedium |
CVE-2025-5516TOTOLINK X2000R URL Filtering Page formFilter cross site scripting | Exploitation statusActively exploited | FixNo | Published06/03/2025 | SeverityMedium |
CVE-2025-5515TOTOLINK X2000R formMapDel command injection | Exploitation statusActively exploited | FixNo | Published06/03/2025 | SeverityMedium |
CVE-2025-5504TOTOLINK X2000R formWsc command injection | Exploitation statusActively exploited | FixNo | Published06/03/2025 | SeverityMedium |
CVE-2024-0579Totolink X2000R formMapDelDevice command injection | Exploitation statusActively exploited | FixNo | Published01/16/2024 | SeverityMedium |
CVE-2023-7222Totolink X2000R HTTP POST Request boa formTmultiAP buffer overflow | Exploitation statusActively exploited | FixNo | Published01/09/2024 | SeverityHigh |
9 Results | Page 1 of 1