Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

X15 — Vulnerabilities & Security Advisories 25

All 25 CVE vulnerabilities found in X15, with AI-generated Chinese analysis, references, and POCs.

This page aggregates security vulnerability data for the product model X15, categorized by specific weakness types and associated security tags. The collection covers a historical timeline of publicly disclosed security flaws affecting this hardware unit, spanning from its initial market release through the most recent advisory updates. Readers can use this resource to track the vendor's published security advisories, analyze the distribution of common weakness classes within the product line, and review the complete vulnerability history associated with the X15 model. The entries are structured to support technical security audits, allowing users to identify recurring failure patterns and assess the overall risk posture of the device. This aggregation focuses strictly on verified CVE records and manufacturer-issued patches, providing a centralized view of the security landscape for this specific product identifier. The data reflects only confirmed vulnerabilities, excluding unverified reports or speculative threats, ensuring that the information remains actionable for system administrators and IT security teams. By examining the chronological progression of these flaws, stakeholders can better understand how the product's security architecture has evolved and where persistent weaknesses may remain in the underlying firmware or software components. This page serves as a neutral reference point for compliance checks and risk assessment.

Vendor: TOTOLINK

CVE ID Title CVSS Severity Published
CVE-2025-8246 TOTOLINK X15 HTTP POST Request formRoute buffer overflow CWE-120 8.8 High 2025-07-27
CVE-2025-8245 TOTOLINK X15 HTTP POST Request formMultiAPVLAN buffer overflow CWE-120 8.8 High 2025-07-27
CVE-2025-8244 TOTOLINK X15 HTTP POST Request formMapDelDevice buffer overflow CWE-120 8.8 High 2025-07-27
CVE-2025-8243 TOTOLINK X15 HTTP POST Request formMapDel buffer overflow CWE-120 8.8 High 2025-07-27
CVE-2025-8242 TOTOLINK X15 HTTP POST Request formFilter buffer overflow CWE-120 8.8 High 2025-07-27
CVE-2025-6824 TOTOLINK X15 HTTP POST Request formParentControl buffer overflow CWE-120 8.8 High 2025-06-28
CVE-2025-6402 TOTOLINK X15 HTTP POST Request formIpv6Setup buffer overflow CWE-120 8.8 High 2025-06-21
CVE-2025-6399 TOTOLINK X15 HTTP POST Request formIPv6Addr buffer overflow CWE-120 8.8 High 2025-06-21
CVE-2025-6165 TOTOLINK X15 HTTP POST Request formTmultiAP buffer overflow CWE-120 8.8 High 2025-06-17
CVE-2025-6150 TOTOLINK X15 HTTP POST Request formMultiAP buffer overflow CWE-120 8.8 High 2025-06-17
CVE-2025-6146 TOTOLINK X15 HTTP POST Request formSysLog buffer overflow CWE-120 8.8 High 2025-06-16
CVE-2025-5790 TOTOLINK X15 HTTP POST Request formIpQoS buffer overflow CWE-120 8.8 High 2025-06-06
CVE-2025-5789 TOTOLINK X15 HTTP POST Request formPortFw buffer overflow CWE-120 8.8 High 2025-06-06
CVE-2025-5788 TOTOLINK X15 HTTP POST Request formReflashClientTbl buffer overflow CWE-120 8.8 High 2025-06-06
CVE-2025-5787 TOTOLINK X15 HTTP POST Request formWsc buffer overflow CWE-120 8.8 High 2025-06-06
CVE-2025-5786 TOTOLINK X15 HTTP POST Request formDMZ buffer overflow CWE-120 8.8 High 2025-06-06
CVE-2025-5785 TOTOLINK X15 HTTP POST Request formWirelessTbl buffer overflow CWE-120 8.8 High 2025-06-06
CVE-2025-5739 TOTOLINK X15 HTTP POST Request formSaveConfig buffer overflow CWE-120 8.8 High 2025-06-06
CVE-2025-5738 TOTOLINK X15 HTTP POST Request formStats buffer overflow CWE-120 8.8 High 2025-06-06
CVE-2025-5737 TOTOLINK X15 HTTP POST Request formDosCfg buffer overflow CWE-120 8.8 High 2025-06-06
CVE-2025-5736 TOTOLINK X15 HTTP POST Request formNtp buffer overflow CWE-120 8.8 High 2025-06-06
CVE-2025-5735 TOTOLINK X15 HTTP POST Request formSetLg buffer overflow CWE-120 8.8 High 2025-06-06
CVE-2025-5734 TOTOLINK X15 HTTP POST Request formWlanRedirect buffer overflow CWE-120 8.8 High 2025-06-06
CVE-2025-5503 TOTOLINK X15 formMapReboot stack-based overflow CWE-121 8.8 High 2025-06-03
CVE-2025-5502 TOTOLINK X15 formMapReboot command injection CWE-77 6.3 Medium 2025-06-03

All 25 known CVE vulnerabilities affecting X15 with full Chinese analysis, references, and POCs where available.