https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2020-23592.htmlhttps://patchthecve.com/cve/CVE-2020-23592.htmlWed, 17 Jun 2026 03:04:51 +0000HIGH 8.8: A vulnerability in OPTILINK OP-XT71000N Hardware Version: V2.2 , Firmware Version: OP_V3.3.1-191028 allows an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack to Reset ONU to Factory Default through ' /mgm_dev_reset.asp.' Resetting to default leads to Escalationhttps://patchthecve.com/cve/CVE-2020-23591.htmlhttps://patchthecve.com/cve/CVE-2020-23591.htmlWed, 17 Jun 2026 03:04:51 +0000CRITICAL 9.8: A vulnerability in OPTILINK OP-XT71000N Hardware Version: V2.2 , Firmware Version: OP_V3.3.1-191028 allows an attacker to upload arbitrary files through " /mgm_dev_upgrade.asp " which can "delete every file for Denial of Service (using 'rm -rf *.*' in the code), reverse connection (using '.asp' webshttps://patchthecve.com/cve/CVE-2020-23590.htmlhttps://patchthecve.com/cve/CVE-2020-23590.htmlWed, 17 Jun 2026 03:04:51 +0000MEDIUM 6.5: A vulnerability in Optilink OP-XT71000N Hardware version: V2.2 , Firmware Version: OP_V3.3.1-191028 allows an unauthenticated remote attacker to conduct a cross-site request forgery (CSRF) attack to change the Password for "WLAN SSID" through "wlwpa.asp".https://patchthecve.com/cve/CVE-2020-23589.htmlhttps://patchthecve.com/cve/CVE-2020-23589.htmlWed, 17 Jun 2026 03:04:51 +0000MEDIUM 6.5: A vulnerability in OPTILINK OP-XT71000N Hardware Version: V2.2 , Firmware Version: OP_V3.3.1-191028 allows an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack to cause a Denial of Service by Rebooting the router through " /mgm_dev_reboot.asp."https://patchthecve.com/cve/CVE-2020-23588.htmlhttps://patchthecve.com/cve/CVE-2020-23588.htmlWed, 17 Jun 2026 03:04:51 +0000MEDIUM 4.3: A vulnerability in OPTILINK OP-XT71000N Hardware Version: V2.2 , Firmware Version: OP_V3.3.1-191028 allows an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack to "Enable or Disable Ports" and to "Change port number" through " /rmtacc.asp ".https://patchthecve.com/cve/CVE-2020-23587.htmlhttps://patchthecve.com/cve/CVE-2020-23587.htmlWed, 17 Jun 2026 03:04:50 +0000LOW 3.1: A vulnerability found in the OPTILINK OP-XT71000N Hardware Version: V2.2 , Firmware Version: OP_V3.3.1-191028 allows an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack to men in the middle attack by adding New Routes in RoutingConfiguration on " /routing.asp ".https://patchthecve.com/cve/CVE-2020-23586.htmlhttps://patchthecve.com/cve/CVE-2020-23586.htmlWed, 17 Jun 2026 03:04:50 +0000MEDIUM 4.3: A vulnerability found in OPTILINK OP-XT71000N Hardware Version: V2.2 , Firmware Version: OP_V3.3.1-191028 allows an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack to Add Network Traffic Control Type Rule.https://patchthecve.com/cve/CVE-2020-23584.htmlhttps://patchthecve.com/cve/CVE-2020-23584.htmlWed, 17 Jun 2026 03:04:50 +0000CRITICAL 9.8: Unauthenticated remote code execution in OPTILINK OP-XT71000N, Hardware Version: V2.2 occurs when the attacker passes arbitrary commands with IP-ADDRESS using " | " to execute commands on " /diag_tracert_admin.asp " in the "PingTest" parameter that leads to command execution.https://patchthecve.com/cve/CVE-2020-23593.htmlhttps://patchthecve.com/cve/CVE-2020-23593.htmlWed, 17 Jun 2026 03:04:51 +0000MEDIUM 6.5: A vulnerability in OPTILINK OP-XT71000N Hardware Version: V2.2, Firmware Version: OP_V3.3.1-191028 allows an unauthenticated, remote attacker to conduct a cross site request forgery (CSRF) attack to enable syslog mode through ' /mgm_log_cfg.asp.' The system starts to log events, 'Remote' mode or 'Bohttps://patchthecve.com/cve/CVE-2020-23585.htmlhttps://patchthecve.com/cve/CVE-2020-23585.htmlWed, 17 Jun 2026 03:04:50 +0000HIGH 8.8: A remote attacker can conduct a cross-site request forgery (CSRF) attack on OPTILINK OP-XT71000N Hardware Version: V2.2 , Firmware Version: OP_V3.3.1-191028. The vulnerability is due to insufficient CSRF protections for the "mgm_config_file.asp" because of which attacker can create a crafted "csrf fhttps://patchthecve.com/cve/CVE-2020-23583.htmlhttps://patchthecve.com/cve/CVE-2020-23583.htmlWed, 17 Jun 2026 03:04:50 +0000CRITICAL 9.8: OPTILINK OP-XT71000N V2.2 is vulnerable to Remote Code Execution. The issue occurs when the attacker sends an arbitrary code on "/diag_ping_admin.asp" to "PingTest" interface that leads to COMMAND EXECUTION. An attacker can successfully trigger the COMMAND and can compromise full system.https://patchthecve.com/cve/CVE-2020-23582.htmlhttps://patchthecve.com/cve/CVE-2020-23582.htmlWed, 17 Jun 2026 03:04:50 +0000MEDIUM 6.5: A vulnerability in the "/admin/wlmultipleap.asp" of optilink OP-XT71000N version: V2.2 could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack to create Multiple WLAN BSSID.