Vulnerabilities

TI-2025-28663 CVE-2025-44848 · GHSA-7p7x-m4v3-7289

TOTOLINK CA600-PoE V5.3c.6665_B20180820 was found to contain a command injection…

LOW 38

TOTOLINK CA600-PoE V5.3c.6665_B20180820 was found to contain a command injection vulnerability in the msg_process function via the Url parameter.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00872 Published 2025-05-01 No fix listed CWE-77

TI-2025-28662 CVE-2025-44847 · GHSA-rg65-rpmg-wff5

TOTOLINK CA600-PoE V5.3c.6665_B20180820 was found to contain a command injection…

MEDIUM 63

TOTOLINK CA600-PoE V5.3c.6665_B20180820 was found to contain a command injection vulnerability in the setWebWlanIdx function via the webWlanIdx parameter.

CVSS 3.1MEDIUM 6.3 Network Low privileges No interaction EPSS 0.00936 Published 2025-05-01 No fix listed CWE-77

TI-2025-28661 CVE-2025-44846 · GHSA-hx3p-h798-3rh6

TOTOLINK CA600-PoE V5.3c.6665_B20180820 was found to contain a command injection…

MEDIUM 63

TOTOLINK CA600-PoE V5.3c.6665_B20180820 was found to contain a command injection vulnerability in the recvUpgradeNewFw function via the fwUrl parameter.

CVSS 3.1MEDIUM 6.3 Network Low privileges No interaction EPSS 0.00936 Published 2025-05-01 No fix listed CWE-77

TI-2025-28660 CVE-2025-44845 · GHSA-22jc-frmh-h993

TOTOLINK CA600-PoE V5.3c.6665_B20180820 was found to contain a command injection…

HIGH 70

TOTOLINK CA600-PoE V5.3c.6665_B20180820 was found to contain a command injection vulnerability in the NTPSyncWithHost function via the hostTime parameter.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00872 Published 2025-05-01 No fix listed CWE-77

TI-2025-28659 CVE-2025-44844 · GHSA-87vc-frqr-mh5v

TOTOLINK CA600-PoE V5.3c.6665_B20180820 was found to contain a command injection…

HIGH 70

TOTOLINK CA600-PoE V5.3c.6665_B20180820 was found to contain a command injection vulnerability in the setUpgradeFW function via the FileName parameter.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00872 Published 2025-05-01 No fix listed CWE-77

TI-2025-28658 CVE-2025-44843 · GHSA-xjhg-m88j-hqrc

TOTOLINK CA600-PoE V5.3c.6665_B20180820 was found to contain a command injection…

HIGH 70

TOTOLINK CA600-PoE V5.3c.6665_B20180820 was found to contain a command injection vulnerability in the CloudSrvUserdataVersionCheck function via the url parameter.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.01023 Published 2025-05-01 No fix listed CWE-77

TI-2025-28657 CVE-2025-44842 · GHSA-4pqf-x898-75w7

TOTOLINK CA600-PoE V5.3c.6665_B20180820 was found to contain a command injection…

HIGH 70

TOTOLINK CA600-PoE V5.3c.6665_B20180820 was found to contain a command injection vulnerability in the msg_process function via the Port parameter.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00872 Published 2025-05-01 No fix listed CWE-77

TI-2025-28656 CVE-2025-44841 · GHSA-hfpw-2f26-vgxr

TOTOLINK CA600-PoE V5.3c.6665_B20180820 was found to contain a command injection…

HIGH 70

TOTOLINK CA600-PoE V5.3c.6665_B20180820 was found to contain a command injection vulnerability in the CloudSrvUserdataVersionCheck function via the version parameter.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00872 Published 2025-05-01 No fix listed CWE-77

TI-2025-28655 CVE-2025-44840 · GHSA-5c44-2p98-m32j

TOTOLINK CA600-PoE V5.3c.6665_B20180820 was found to contain a command injection…

HIGH 70

TOTOLINK CA600-PoE V5.3c.6665_B20180820 was found to contain a command injection vulnerability in the CloudSrvUserdataVersionCheck function via the svn parameter.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00872 Published 2025-05-01 No fix listed CWE-77

TI-2025-28654 CVE-2025-44839 · GHSA-x2f7-mww2-v4hq

TOTOLINK CA600-PoE V5.3c.6665_B20180820 was found to contain a command injection…

HIGH 70

TOTOLINK CA600-PoE V5.3c.6665_B20180820 was found to contain a command injection vulnerability in the CloudSrvUserdataVersionCheck function via the magicid parameter.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00872 Published 2025-05-01 No fix listed CWE-77

Vulnerabilities

Filters