← Back

CVE-2024-33433

nvd nist
Published: May 14, 2024Modified: Jun 17, 2026

JSON object

Loading...
4.8
Vector
CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Exploitability: 1.7 / Impact: 2.7
Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

Cross Site Scripting vulnerability in TOTOLINK X2000R before v1.0.0-B20231213.1013 allows a remote attacker to execute arbitrary code via the Guest Access Control parameter in the Wireless Page.

Affected (1)

Totolink
1 product
X2000r Firmware
Configuration A
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
X2000r Firmware
Before 1.0.0-b20231213.1013
Running on/withPlatform Versions
Totolink
X2000r
All versions

Related CWEs

CWE-233
Improper Handling of Parameters
The product does not properly handle when the expected number of parameters, fields, or arguments is not provided in input, or if those parameters are undefined.

References (2)

Source: cve@mitre.org
ExploitThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
ExploitThird Party Advisory

Timeline

No history available yet.