CVE-2023-51135

Summary

CVE-2023-51135 is a newly disclosed vulnerability affecting the TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web firmware. This issue involves a stack overflow in the function formPasswordSetup, which could be exploited by an attacker to execute arbitrary code or cause a denial-of-service condition. Successful exploitation of this vulnerability requires user interaction and could potentially lead to unauthorized access or system compromise. It is recommended that users apply the latest available firmware patch to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.