CVE-2023-7222

Summary

CVE-2023-7222 is a critical vulnerability affecting the Totolink X2000R 1.0.0-B20221212.1452 firmware. The issue resides in the HTTP POST Request Handler's formTmultiAP function within the /bin/boa file. Manipulation of the submit-url argument results in a buffer overflow, enabling remote attackers to exploit this vulnerability, which has already been disclosed to the public. The identifier for this vulnerability is VDB-249856. Unfortunately, the vendor did not respond to early disclosure attempts.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.