Vulnerability Details CVE-2024-33433
Cross Site Scripting vulnerability in TOTOLINK X2000R before v1.0.0-B20231213.1013 allows a remote attacker to execute arbitrary code via the Guest Access Control parameter in the Wireless Page.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.006
EPSS Ranking 47.0%
CVSS Severity
CVSS v3 Score 4.8
References
Products affected by CVE-2024-33433
-
cpe:2.3:h:totolink:x2000r:-
-
cpe:2.3:o:totolink:x2000r_firmware:1.0.0
-
cpe:2.3:o:totolink:x2000r_firmware:1.0.0-b20221212.1452
-
cpe:2.3:o:totolink:x2000r_firmware:1.0.0-b20230221.0948
-
cpe:2.3:o:totolink:x2000r_firmware:1.0.0-b20230221.0948.web
-
cpe:2.3:o:totolink:x2000r_firmware:1.0.0-b20230726.1108