[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fnkPjezItvP7XRB9FPeN0sMdTtSUCm78FC3UZoGHzohw":3,"g5a-risk:CVE-2023-36950":137},{"success":4,"data":5,"meta":134},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":38,"epssPercentile":27,"epssTimeSeries":39,"severity":40,"affectedProducts":41,"affectedProductsCount":58,"references":59,"referencesCount":66,"weaknesses":67,"weaknessesCount":81,"isActivelyExploited":82,"cisaInfo":27,"otxData":27,"relatedBlogPosts":83,"seoMetadata":84,"configurations":109,"relatedVendorCves":132,"notableEvents":133},"CVE-2023-36950","What is CVE-2023-36950?","TOTOLINK X5000R V9.1.0u.6118_B20201102 and TOTOLINK A7000R V9.1.0u.6115_B20201022 was discovered to contain a stack overflow via the http_host parameter in the function loginAuth.","TOTOLINK X5000R V9.1.0u.6118_B20201102 and TOTOLINK A7000R V9.1.0u.6115_B20201022 was discovered to contain a stack overflow via the http_host parameter in t...","2023-10-16T06:15:10.253","2024-09-12T13:35:15.18",9.8,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":27,"CVSSMetricV2":27,"CVSSMetricV40":27},[16,30],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":25,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH","CRITICAL",null,3.9,5.9,{"Source":31,"Type":32,"CVSSData":33,"ExploitabilityScore":37,"ImpactScore":29},"134c704f-9b21-4f2e-91b3-4a467353bcc0","Secondary",{"Version":20,"VectorString":34,"AttackVector":35,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":36,"BaseSeverity":25,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":25,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"CVSS:3.1\u002FAV:A\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H","ADJACENT_NETWORK",8.8,2.8,0.01032,[38,38,38,38,38,38,38],"Critical",[42,47,51,55],{"vendor":43,"product":44,"version":45,"criteria":46,"vulnerable":4},"totolink","x5000r_firmware","9.1.0u.6118_b20201102","cpe:2.3:o:totolink:x5000r_firmware:9.1.0u.6118_b20201102:*:*:*:*:*:*:*",{"vendor":43,"product":48,"version":49,"criteria":50,"vulnerable":4},"x5000r","-","cpe:2.3:h:totolink:x5000r:-:*:*:*:*:*:*:*",{"vendor":43,"product":52,"version":53,"criteria":54,"vulnerable":4},"a7000r_firmware","9.1.0u.6115_b20201022","cpe:2.3:o:totolink:a7000r_firmware:9.1.0u.6115_b20201022:*:*:*:*:*:*:*",{"vendor":43,"product":56,"version":49,"criteria":57,"vulnerable":4},"a7000r","cpe:2.3:h:totolink:a7000r:-:*:*:*:*:*:*:*",4,[60],{"url":61,"source":62,"tags":63},"https:\u002F\u002Fgithub.com\u002FArcherber\u002Fbug_submit\u002Fblob\u002Fmain\u002FTOTOLINK\u002Floginauth.md","GitHub",[64,65],"Exploit","Third Party Advisory",1,[68,76],{"id":69,"name":70,"description":71,"extendedDescription":72,"status":73,"abstraction":74,"structure":75},"CWE-787","Out-of-bounds Write","The product writes data past the end, or before the beginning, of the intended buffer.","","Draft","Base","Simple",{"id":77,"name":78,"description":79,"extendedDescription":72,"status":73,"abstraction":80,"structure":75},"CWE-121","Stack-based Buffer Overflow","A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).","Variant",2,false,[],{"title":85,"metaDescription":86,"keywords":87,"canonicalUrl":88,"structuredData":89},"What is CVE-2023-36950? Vulnerability Analysis | Security Advisory | EdgeProtect","Comprehensive analysis of CVE-2023-36950, a critical severity cyber security vulnerability from 2023. TOTOLINK X5000R V9.1.0u.6118_B20201102 and TOTOLINK A70...","CVE-2023-36950, CVE-2023-36950 vulnerability, CVE-2023-36950 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2023, CVSS score, exploit, patch, remediation, totolink security, x5000r_firmware vulnerability, x5000r vulnerability, a7000r_firmware vulnerability, a7000r vulnerability","\u002Fwhat-is\u002Fcve-2023-36950",{"@context":90,"@type":91,"headline":85,"description":86,"datePublished":10,"dateModified":11,"author":92,"publisher":96,"about":100,"mainEntityOfPage":104,"articleSection":107,"keywords":108},"https:\u002F\u002Fschema.org","TechArticle",{"@type":93,"name":94,"url":95},"Organization","EdgeProtect","https:\u002F\u002Fedgeprotect.io",{"@type":93,"name":94,"url":95,"logo":97},{"@type":98,"url":99},"ImageObject","https:\u002F\u002Fedgeprotect.io\u002Fimg\u002Flogos\u002Fedgeprotect-logo-512.png",{"@type":101,"name":6,"description":102,"additionalType":103},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":105,"@id":106},"WebPage","https:\u002F\u002Fedgeprotect.io\u002Fwhat-is\u002Fcve-2023-36950","Cybersecurity","CVE-2023-36950, CVE-2023-36950 vulnerability, CVE-2023-36950 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[110,122],{"Operator":111,"Negate":27,"Nodes":112},"AND",[113,118],{"Operator":114,"Negate":27,"CPEMatch":115},"OR",[116],{"Vulnerable":4,"Criteria":46,"MatchCriteriaID":117,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"AFCC3B52-0985-4F61-BBCC-16A271E15CD4",{"Operator":114,"Negate":27,"CPEMatch":119},[120],{"Vulnerable":27,"Criteria":50,"MatchCriteriaID":121,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"BC45BFB0-0CF0-4F9E-B19D-D274B17F1591",{"Operator":111,"Negate":27,"Nodes":123},[124,128],{"Operator":114,"Negate":27,"CPEMatch":125},[126],{"Vulnerable":4,"Criteria":54,"MatchCriteriaID":127,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"A5BB152D-5E33-4158-BFFD-68AED6A174E2",{"Operator":114,"Negate":27,"CPEMatch":129},[130],{"Vulnerable":27,"Criteria":57,"MatchCriteriaID":131,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"603DA206-05D4-48FD-A506-F3BD8B4383B2",[],[],{"lastModified":11,"cacheTime":135,"version":136},1793232099747,"2.0",{"score":138,"band":139,"action":140,"scoredAt":141},56,"Medium","Plan remediation","2026-10-28T06:59:02.084994+00:00"]