CVE-2023-45985: High severity totolink x5000r firmware vulnerability

Published Oct 16, 2023

Updated

TOTOLINK X5000R V9.1.0u.6118B20201102 and TOTOLINK A7000R V9.1.0u.6115B20201022 were discovered to contain a stack overflow in the function setParentalRules. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request.

Affected Software

8 affected components

All of the following

TOTOLINK X5000r Firmware=9.1.0u.6118_b20201102

TOTOLINK X5000R

All of the following

TOTOLINK A7000R firmware=9.1.0u.6115_b20201022

TOTOLINK A7000R

TOTOLINK X5000r Firmware=9.1.0u.6118_b20201102

TOTOLINK X5000R

TOTOLINK A7000R firmware=9.1.0u.6115_b20201022

TOTOLINK A7000R

Event History

Oct 16, 2023

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Data Sourced

via NVD·06:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the vulnerability ID for this TOTOLINK issue?

The vulnerability ID for this TOTOLINK issue is CVE-2023-45985.

What is the severity of CVE-2023-45985?

CVE-2023-45985 has a severity rating of 7.5 (High).

How does CVE-2023-45985 affect TOTOLINK X5000R firmware version 9.1.0u.6118_b20201102?

CVE-2023-45985 affects TOTOLINK X5000R firmware version 9.1.0u.6118_b20201102 by allowing attackers to cause a Denial of Service (DoS) via a crafted POST request.

How does CVE-2023-45985 affect TOTOLINK A7000R firmware version 9.1.0u.6115_b20201022?

CVE-2023-45985 affects TOTOLINK A7000R firmware version 9.1.0u.6115_b20201022 by allowing attackers to cause a Denial of Service (DoS) via a crafted POST request.

Is TOTOLINK X5000R hardware vulnerable to CVE-2023-45985?

No, TOTOLINK X5000R hardware is not vulnerable to CVE-2023-45985.

Is TOTOLINK A7000R hardware vulnerable to CVE-2023-45985?

No, TOTOLINK A7000R hardware is not vulnerable to CVE-2023-45985.

How can I fix CVE-2023-45985?

To fix CVE-2023-45985, it is recommended to update the firmware to a non-vulnerable version provided by TOTOLINK.