Ca600-poe Firmware (Totolink) - vulnerabilities (CVEs)
10 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2025-05-01. Vendor: Totolink.
CVEs of Ca600-poe Firmware
- CVE-2025-44848 - CVSS 6.5 (medium), 2025-05-01: TOTOLINK CA600-PoE V5.3c.6665_B20180820 was found to contain a command injection vulnerability in the msg_process function via the Url parameter. This…
- CVE-2025-44847 - CVSS 6.3 (medium), 2025-05-01: TOTOLINK CA600-PoE V5.3c.6665_B20180820 was found to contain a command injection vulnerability in the setWebWlanIdx function via the webWlanIdx parameter.…
- CVE-2025-44839 - CVSS 6.5 (medium), 2025-05-01: TOTOLINK CA600-PoE V5.3c.6665_B20180820 was found to contain a command injection vulnerability in the CloudSrvUserdataVersionCheck function via the magicid…
- CVE-2025-44842 - CVSS 6.5 (medium), 2025-05-01: TOTOLINK CA600-PoE V5.3c.6665_B20180820 was found to contain a command injection vulnerability in the msg_process function via the Port parameter. This…
- CVE-2025-44845 - CVSS 6.5 (medium), 2025-05-01: TOTOLINK CA600-PoE V5.3c.6665_B20180820 was found to contain a command injection vulnerability in the NTPSyncWithHost function via the hostTime parameter.…
- CVE-2025-44841 - CVSS 6.5 (medium), 2025-05-01: TOTOLINK CA600-PoE V5.3c.6665_B20180820 was found to contain a command injection vulnerability in the CloudSrvUserdataVersionCheck function via the version…
- CVE-2025-44844 - CVSS 6.5 (medium), 2025-05-01: TOTOLINK CA600-PoE V5.3c.6665_B20180820 was found to contain a command injection vulnerability in the setUpgradeFW function via the FileName parameter. This…
- CVE-2025-44840 - CVSS 6.5 (medium), 2025-05-01: TOTOLINK CA600-PoE V5.3c.6665_B20180820 was found to contain a command injection vulnerability in the CloudSrvUserdataVersionCheck function via the svn…
- CVE-2025-44843 - CVSS 6.5 (medium), 2025-05-01: TOTOLINK CA600-PoE V5.3c.6665_B20180820 was found to contain a command injection vulnerability in the CloudSrvUserdataVersionCheck function via the url…
- CVE-2025-44846 - CVSS 6.3 (medium), 2025-05-01: TOTOLINK CA600-PoE V5.3c.6665_B20180820 was found to contain a command injection vulnerability in the recvUpgradeNewFw function via the fwUrl parameter. This…
