Everything NetSec Tribune has reported about TOTOLINK: 3 stories, newest first. Part of our Vulnerabilities coverage.
A critical OS command injection flaw in specific TOTOLINK router firmware could allow attackers to execute code if they possess valid credentials.
A critical command injection flaw in the X2000R’s password change feature enables remote attackers to run arbitrary code on the device.
Authentication is required to trigger the stack-based buffer overflow in the X2000R device management interface, leading to arbitrary code execution.