CVE-2024-28404
TOTOLINK X2000R before V1.0.0-B20231213.1013 contains a Stored Cross-site scripting (XSS)...
TOTOLINK X2000R before V1.0.0-B20231213.1013 contains a Stored Cross-site scripting (XSS) vulnerability in MAC Filtering under the Firewall Page.
Attack profile
How easy it is to exploit
- Attack vector
- Adjacent network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- Required
What an attacker can affect
- Confidentiality
- Low
- Integrity
- Low
- Availability
- High
Exploit likelihood
What each source reports
CVE List Score used
TOTOLINK X2000R before V1.0.0-B20231213.1013 contains a Stored Cross-site scripting (XSS) vulnerability in MAC Filtering under the Firewall Page.
- Record
CVE-2024-28404- CVSS 3.1
- 8.0 High
CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:H - Weakness
- CWE-79
- Updated
- 2026-11-02
EUVDEUVD-2024-25501
TOTOLINK X2000R before V1.0.0-B20231213.1013 contains a Stored Cross-site scripting (XSS) vulnerability in MAC Filtering under the Firewall Page.
- Record
EUVD-2024-25501- CVSS 3.1
- 8.0 High
CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:H - Updated
- 2026-11-03
GitHub AdvisoriesGHSA-h54h-77gg-v4vm
TOTOLINK X2000R before V1.0.0-B20231213.1013 contains a Stored Cross-site scripting (XSS)...
TOTOLINK X2000R before V1.0.0-B20231213.1013 contains a Stored Cross-site scripting (XSS) vulnerability in MAC Filtering under the Firewall Page.
- Record
GHSA-h54h-77gg-v4vm- CVSS 3.1
- 8.0 High
CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:H - Weakness
- CWE-79
- Updated
- 2026-11-02
NVD
TOTOLINK X2000R before V1.0.0-B20231213.1013 contains a Stored Cross-site scripting (XSS) vulnerability in MAC Filtering under the Firewall Page.
- Record
CVE-2024-28404- CVSS 3.1
- 8.0 High
CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:H - Weakness
- CWE-79
- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2024-28404 is a high vulnerability (CVSS 8.0) in Totolink X2000r Firmware, published March 15, 2024. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.48%, the 41st percentile. No source names a fixed version.