Cp900 Firmware (Totolink) - vulnerabilities (CVEs)
13 CVEs, 0 in the last 30 days, 3 known versions, newest CVE from 2025-05-01. Vendor: Totolink.
CVEs of Cp900 Firmware
- CVE-2025-44838 - CVSS 6.3 (medium), 2025-05-01: TOTOLINK CPE CP900 V6.3c.1144_B20190715 was discovered to contain a command injection vulnerability in the setUploadUserData function via the FileName…
- CVE-2025-44837 - CVSS 6.3 (medium), 2025-05-01: TOTOLINK CPE CP900 V6.3c.1144_B20190715 was discovered to contain a command injection vulnerability in the CloudSrvUserdataVersionCheck function via the url…
- CVE-2025-44836 - CVSS 6.3 (medium), 2025-05-01: TOTOLINK CPE CP900 V6.3c.1144_B20190715 was discovered to contain a command injection vulnerability in the setApRebootScheCfg function via the hour or minute…
- CVE-2025-44854 - CVSS 6.3 (medium), 2025-05-01: TOTOLINK CP900 V6.3c.1144_B20190715 was found to contain a command injection vulnerability in the setUpgradeUboot function via the FileName parameter. This…
- CVE-2024-7464 - CVSS 9.8 (critical), 2024-08-05: A vulnerability, which was classified as critical, has been found in TOTOLINK CP900 6.3c.566. This issue affects the function setTelnetCfg of the component…
- CVE-2024-7463 - CVSS 9.8 (critical), 2024-08-05: A vulnerability classified as critical was found in TOTOLINK CP900 6.3c.566. This vulnerability affects the function UploadCustomModule of the file…
- CVE-2022-28495 - CVSS 9.8 (critical), 2023-03-24: TOTOLink outdoor CPE CP900 V6.3c.566_B20171026 is discovered to contain a command injection vulnerability in the setWebWlanIdx function via the webWlanIdx…
- CVE-2022-28496 - CVSS 9.8 (critical), 2023-03-23: TOTOLink outdoor CPE CP900 V6.3c.566_B20171026 discovered to contain a command injection vulnerability in the setPasswordCfg function via the adminuser and…
- CVE-2022-28497 - CVSS 9.8 (critical), 2023-03-23: TOTOLink outdoor CPE CP900 V6.3c.566_B20171026 is discovered to contain a command injection vulnerability in the mtd_write_bootloader function via the…
- CVE-2022-28491 - CVSS 9.8 (critical), 2023-03-23: TOTOLink outdoor CPE CP900 V6.3c.566_B20171026 contains a command injection vulnerability in the NTPSyncWithHost function via the host_name parameter. This…
- CVE-2022-28493 - CVSS 9.8 (critical), 2023-03-23: A vulnerability in TOTOLINK CP900 V6.3c.566 allows attackers to start the Telnet service,
- CVE-2022-28492 - CVSS 9.8 (critical), 2023-03-23: TOTOLINK Technology CPE with firmware V6.3c.566 ,allows remote attackers to bypass Login.
- CVE-2022-28494 - CVSS 9.8 (critical), 2023-03-23: TOTOLink outdoor CPE CP900 V6.3c.566_B20171026 is discovered to contain a command injection vulnerability in the setUpgradeFW function via the filename…
