TI-2025-06015 CVE-2025-6621 · GHSA-8pmg-2x8v-mfv9
TOTOLINK CA300-PoE ap.so QuickSetting os command injection
Priority MEDIUM 57
A vulnerability classified as critical has been found in TOTOLINK CA300-PoE 6.2c.884.
Vulnerabilities
24 records
TI-2025-06014 CVE-2025-6620 · GHSA-7x9j-wf2g-2h5x
TOTOLINK CA300-PoE upgrade.so setUpgradeUboot os command injection
Priority MEDIUM 57
A vulnerability was found in TOTOLINK CA300-PoE 6.2c.884.
TI-2025-06013 CVE-2025-6619 · GHSA-45hj-j2c3-984f
TOTOLINK CA300-PoE upgrade.so setUpgradeFW os command injection
Priority MEDIUM 57
A vulnerability was found in TOTOLINK CA300-PoE 6.2c.884.
TI-2025-06012 CVE-2025-6618 · GHSA-2xw8-pmxr-9vgf
TOTOLINK CA300-PoE wps.so SetWLanApcliSettings os command injection
Priority MEDIUM 57
A vulnerability was found in TOTOLINK CA300-PoE 6.2c.884.
TI-2025-28668 CVE-2025-44863 · GHSA-6c7x-4pvf-q257
TOTOLINK CA300-POE V6.2c.884_B20180522 was found to contain a command injection…
Priority HIGH 70
TOTOLINK CA300-POE V6.2c.884_B20180522 was found to contain a command injection vulnerability in the msg_process function via the Url parameter.
TI-2025-28667 CVE-2025-44862 · GHSA-mq93-f783-wcgv
TOTOLINK CA300-POE V6.2c.884_B20180522 was found to contain a command injection…
Priority MEDIUM 63
TOTOLINK CA300-POE V6.2c.884_B20180522 was found to contain a command injection vulnerability in the recvUpgradeNewFw function via the fwUrl parameter.
TI-2025-28666 CVE-2025-44861 · GHSA-2px4-35vj-j3x5
TOTOLINK CA300-POE V6.2c.884_B20180522 was found to contain a command injection…
Priority MEDIUM 63
TOTOLINK CA300-POE V6.2c.884_B20180522 was found to contain a command injection vulnerability in the CloudSrvUserdataVersionCheck function via the url parameter.
TI-2025-28665 CVE-2025-44860 · GHSA-54g8-pj2j-rgc7
TOTOLINK CA300-POE V6.2c.884_B20180522 was found to contain a command injection…
Priority HIGH 70
TOTOLINK CA300-POE V6.2c.884_B20180522 was found to contain a command injection vulnerability in the msg_process function via the Port parameter.
TI-2024-06682 CVE-2024-7217 · GHSA-wq5w-42wp-4qfx
TOTOLINK CA300-PoE cstecgi.cgi loginauth buffer overflow
Priority MEDIUM 57
A vulnerability was found in TOTOLINK CA300-PoE 6.2c.884.
TI-2023-09903 CVE-2023-24161 · GHSA-76mf-j946-5j78
TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability…
Priority HIGH 82
TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the webWlanIdx parameter in the setWebWlanIdx function.
TI-2023-09902 CVE-2023-24160 · GHSA-hhv2-mgcf-2j9h
TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability…
Priority HIGH 82
TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the admuser parameter in the setPasswordCfg function.
TI-2023-09901 CVE-2023-24159 · GHSA-pc8p-68gv-cv22
TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability…
Priority HIGH 82
TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the admpass parameter in the setPasswordCfg function.
TI-2023-09892 CVE-2023-24149 · GHSA-hgv5-65gr-22wf
TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a hard code password for root…
Priority HIGH 82
TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a hard code password for root which is stored in the component /etc/shadow.
TI-2023-09891 CVE-2023-24148 · GHSA-w69f-c3c3-v943
TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability…
Priority HIGH 82
TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the FileName parameter in the setUploadUserData function.
TI-2023-09890 CVE-2023-24147 · GHSA-f7h3-8qx9-5fh7
TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a hard code password for the…
Priority LOW 34
TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a hard code password for the telnet service which is stored in the component /etc/config/product.ini.
TI-2023-09889 CVE-2023-24146 · GHSA-hw59-w5mg-cjph
TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability…
Priority HIGH 76
TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the minute parameter in the setRebootScheCfg function.
TI-2023-09888 CVE-2023-24145 · GHSA-rc84-qxhw-g5rx
TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability…
Priority HIGH 76
TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the plugin_version parameter in the setUnloadUserData function.
TI-2023-09887 CVE-2023-24144 · GHSA-63pw-79f7-3hx6
TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability…
Priority HIGH 76
TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the hour parameter in the setRebootScheCfg function.
TI-2023-09886 CVE-2023-24143 · GHSA-h8gc-xwmw-4hvj
TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability…
Priority HIGH 76
TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the NetDiagTracertHop parameter in the setNetworkDiag function.
TI-2023-09885 CVE-2023-24142 · GHSA-c5v9-4f44-pwrx
TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability…
Priority HIGH 76
TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the NetDiagPingSize parameter in the setNetworkDiag function.
TI-2023-09884 CVE-2023-24141 · GHSA-83f5-8f57-ww39
TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability…
Priority HIGH 76
TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the NetDiagPingTimeOut parameter in the setNetworkDiag function.
TI-2023-09883 CVE-2023-24140 · GHSA-9xxg-xp6f-w4pc
TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability…
Priority HIGH 76
TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the NetDiagPingNum parameter in the setNetworkDiag function.
TI-2023-09882 CVE-2023-24139 · GHSA-cc2g-584x-8vhw
TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability…
Priority HIGH 76
TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the NetDiagHost parameter in the setNetworkDiag function.
TI-2023-09881 CVE-2023-24138 · GHSA-wxfp-rxcm-7h6v
TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability…
Priority HIGH 82
TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the host_time parameter in the NTPSyncWithHost function.