[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fr7595VPO7eQVfkivahuFmN8zxxeVxSWCXjL_Pk1SlZQ":3,"g5a-risk:CVE-2023-36947":137},{"success":4,"data":5,"meta":134},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":38,"epssPercentile":27,"epssTimeSeries":39,"severity":40,"affectedProducts":41,"affectedProductsCount":58,"references":59,"referencesCount":66,"weaknesses":67,"weaknessesCount":81,"isActivelyExploited":82,"cisaInfo":27,"otxData":27,"relatedBlogPosts":83,"seoMetadata":84,"configurations":109,"relatedVendorCves":132,"notableEvents":133},"CVE-2023-36947","What is CVE-2023-36947?","TOTOLINK X5000R V9.1.0u.6118_B20201102 and TOTOLINK A7000R V9.1.0u.6115_B20201022 was discovered to contain a stack overflow via the File parameter in the function UploadCustomModule.","TOTOLINK X5000R V9.1.0u.6118_B20201102 and TOTOLINK A7000R V9.1.0u.6115_B20201022 was discovered to contain a stack overflow via the File parameter in the fu...","2023-10-16T05:15:49.74","2024-09-12T13:35:13.497",9.8,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":27,"CVSSMetricV2":27,"CVSSMetricV40":27},[16,30],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":25,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH","CRITICAL",null,3.9,5.9,{"Source":31,"Type":32,"CVSSData":33,"ExploitabilityScore":37,"ImpactScore":29},"134c704f-9b21-4f2e-91b3-4a467353bcc0","Secondary",{"Version":20,"VectorString":34,"AttackVector":35,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":36,"BaseSeverity":25,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":25,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"CVSS:3.1\u002FAV:A\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H","ADJACENT_NETWORK",8.8,2.8,0.01032,[38,38,38,38,38,38,38],"Critical",[42,47,51,54],{"vendor":43,"product":44,"version":45,"criteria":46,"vulnerable":4},"totolink","x5000r","-","cpe:2.3:h:totolink:x5000r:-:*:*:*:*:*:*:*",{"vendor":43,"product":48,"version":49,"criteria":50,"vulnerable":4},"x5000r_firmware","9.1.0u.6118_b20201102","cpe:2.3:o:totolink:x5000r_firmware:9.1.0u.6118_b20201102:*:*:*:*:*:*:*",{"vendor":43,"product":52,"version":45,"criteria":53,"vulnerable":4},"a7000r","cpe:2.3:h:totolink:a7000r:-:*:*:*:*:*:*:*",{"vendor":43,"product":55,"version":56,"criteria":57,"vulnerable":4},"a7000r_firmware","9.1.0u.6115_b20201022","cpe:2.3:o:totolink:a7000r_firmware:9.1.0u.6115_b20201022:*:*:*:*:*:*:*",4,[60],{"url":61,"source":62,"tags":63},"https:\u002F\u002Fgithub.com\u002FArcherber\u002Fbug_submit\u002Fblob\u002Fmain\u002FTOTOLINK\u002FUploadCustomModule.md","GitHub",[64,65],"Exploit","Third Party Advisory",1,[68,76],{"id":69,"name":70,"description":71,"extendedDescription":72,"status":73,"abstraction":74,"structure":75},"CWE-787","Out-of-bounds Write","The product writes data past the end, or before the beginning, of the intended buffer.","","Draft","Base","Simple",{"id":77,"name":78,"description":79,"extendedDescription":72,"status":73,"abstraction":80,"structure":75},"CWE-121","Stack-based Buffer Overflow","A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).","Variant",2,false,[],{"title":85,"metaDescription":86,"keywords":87,"canonicalUrl":88,"structuredData":89},"What is CVE-2023-36947? Vulnerability Analysis | Security Advisory | EdgeProtect","Comprehensive analysis of CVE-2023-36947, a critical severity cyber security vulnerability from 2023. TOTOLINK X5000R V9.1.0u.6118_B20201102 and TOTOLINK A70...","CVE-2023-36947, CVE-2023-36947 vulnerability, CVE-2023-36947 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2023, CVSS score, exploit, patch, remediation, totolink security, x5000r vulnerability, x5000r_firmware vulnerability, a7000r vulnerability, a7000r_firmware vulnerability","\u002Fwhat-is\u002Fcve-2023-36947",{"@context":90,"@type":91,"headline":85,"description":86,"datePublished":10,"dateModified":11,"author":92,"publisher":96,"about":100,"mainEntityOfPage":104,"articleSection":107,"keywords":108},"https:\u002F\u002Fschema.org","TechArticle",{"@type":93,"name":94,"url":95},"Organization","EdgeProtect","https:\u002F\u002Fedgeprotect.io",{"@type":93,"name":94,"url":95,"logo":97},{"@type":98,"url":99},"ImageObject","https:\u002F\u002Fedgeprotect.io\u002Fimg\u002Flogos\u002Fedgeprotect-logo-512.png",{"@type":101,"name":6,"description":102,"additionalType":103},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":105,"@id":106},"WebPage","https:\u002F\u002Fedgeprotect.io\u002Fwhat-is\u002Fcve-2023-36947","Cybersecurity","CVE-2023-36947, CVE-2023-36947 vulnerability, CVE-2023-36947 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[110,122],{"Operator":111,"Negate":27,"Nodes":112},"AND",[113,118],{"Operator":114,"Negate":27,"CPEMatch":115},"OR",[116],{"Vulnerable":27,"Criteria":46,"MatchCriteriaID":117,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"BC45BFB0-0CF0-4F9E-B19D-D274B17F1591",{"Operator":114,"Negate":27,"CPEMatch":119},[120],{"Vulnerable":4,"Criteria":50,"MatchCriteriaID":121,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"AFCC3B52-0985-4F61-BBCC-16A271E15CD4",{"Operator":111,"Negate":27,"Nodes":123},[124,128],{"Operator":114,"Negate":27,"CPEMatch":125},[126],{"Vulnerable":27,"Criteria":53,"MatchCriteriaID":127,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"603DA206-05D4-48FD-A506-F3BD8B4383B2",{"Operator":114,"Negate":27,"CPEMatch":129},[130],{"Vulnerable":4,"Criteria":57,"MatchCriteriaID":131,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"A5BB152D-5E33-4158-BFFD-68AED6A174E2",[],[],{"lastModified":11,"cacheTime":135,"version":136},1793245356505,"2.0",{"score":138,"band":139,"action":140,"scoredAt":141},56,"Medium","Plan remediation","2026-10-28T06:59:02.084539+00:00"]