A critical unsigned firmware vulnerability in the Totolink X2000R router permits authenticated attackers to install arbitrary firmware via HTTP requests.
A critical buffer overflow in specific Totolink firmware allows authenticated attackers to execute arbitrary code via HTTP requests, posing a risk to exposed management interfaces.
A critical authenticated remote code execution flaw exists in specific TOTOLINK X2000R firmware. Teams should verify versions and restrict administrative access immediately.