CVE-2023-45985: Totolink a7000r Firmware

High severity, CVSS 7.5. EPSS: 0.7% chance of exploitation in the next 30 days.

TOTOLINK X5000R V9.1.0u.6118_B20201102 and TOTOLINK A7000R V9.1.0u.6115_B20201022 were discovered to contain a stack overflow in the function setParentalRules. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request.

Affected products

• Totolink a7000r Firmware: version 9.1.0u.6115_b20201022 only
• Totolink x5000r Firmware: version 9.1.0u.6118_b20201102 only

Published 2023-10-16. Last modified 2026-06-17.