CVE-2023-51136

The vulnerability results from a stack overflow error (CWE-787) in the formRebootSchedule function handling device restart scheduling. An attacker can send a specially crafted network request containing excessively long input data, which causes overwriting of stack memory areas beyond the intended buffer. The lack of required authentication to trigger the vulnerability makes the exploit possible directly from the network without any privileges.

An attacker can cause arbitrary code execution (RCE) on the device, its failure, or complete administrative takeover, which includes violation of system confidentiality, integrity, and availability.

Apply patches available from the manufacturer according to references (manufacturer website: totolink.cn, firmware download section for model X2000R). Until the update is applied, it is recommended to restrict access to the device management panel exclusively to trusted networks and disable remote access to the administrative interface.

TOTOLINK X2000R Firmware version v1.0.0-B20230221.0948.web