Ca600 Poe Firmware

ca600-poe_firmware

Vendor: Totolink • 10 CVEs

CVEs (10)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2025-44848 1Totolink 1Ca600 Poe Firmware Jun 17, 2026 May 1, 2025 N/A· v4 6.5 MEDIUM· v3 N/A· v2 TOTOLINK CA600-PoE V5.3c.6665_B20180820 was found to contain a command injection vulnerability in the msg_process function via the Url parameter. This vulnerability allows attackers to execute arbitrary commands via a cr...Show more TOTOLINK CA600-PoE V5.3c.6665_B20180820 was found to contain a command injection vulnerability in the msg_process function via the Url parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request.Show less
CVE-2025-44847 1Totolink 1Ca600 Poe Firmware Jun 17, 2026 May 1, 2025 N/A· v4 6.3 MEDIUM· v3 N/A· v2 TOTOLINK CA600-PoE V5.3c.6665_B20180820 was found to contain a command injection vulnerability in the setWebWlanIdx function via the webWlanIdx parameter. This vulnerability allows attackers to execute arbitrary commands...Show more TOTOLINK CA600-PoE V5.3c.6665_B20180820 was found to contain a command injection vulnerability in the setWebWlanIdx function via the webWlanIdx parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request.Show less
CVE-2025-44846 1Totolink 1Ca600 Poe Firmware Jun 17, 2026 May 1, 2025 N/A· v4 6.3 MEDIUM· v3 N/A· v2 TOTOLINK CA600-PoE V5.3c.6665_B20180820 was found to contain a command injection vulnerability in the recvUpgradeNewFw function via the fwUrl parameter. This vulnerability allows attackers to execute arbitrary commands v...Show more TOTOLINK CA600-PoE V5.3c.6665_B20180820 was found to contain a command injection vulnerability in the recvUpgradeNewFw function via the fwUrl parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request.Show less
CVE-2025-44845 1Totolink 1Ca600 Poe Firmware Jun 17, 2026 May 1, 2025 N/A· v4 6.5 MEDIUM· v3 N/A· v2 TOTOLINK CA600-PoE V5.3c.6665_B20180820 was found to contain a command injection vulnerability in the NTPSyncWithHost function via the hostTime parameter. This vulnerability allows attackers to execute arbitrary commands...Show more TOTOLINK CA600-PoE V5.3c.6665_B20180820 was found to contain a command injection vulnerability in the NTPSyncWithHost function via the hostTime parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request.Show less
CVE-2025-44844 1Totolink 1Ca600 Poe Firmware Jun 17, 2026 May 1, 2025 N/A· v4 6.5 MEDIUM· v3 N/A· v2 TOTOLINK CA600-PoE V5.3c.6665_B20180820 was found to contain a command injection vulnerability in the setUpgradeFW function via the FileName parameter. This vulnerability allows attackers to execute arbitrary commands vi...Show more TOTOLINK CA600-PoE V5.3c.6665_B20180820 was found to contain a command injection vulnerability in the setUpgradeFW function via the FileName parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request.Show less
CVE-2025-44843 1Totolink 1Ca600 Poe Firmware Jun 17, 2026 May 1, 2025 N/A· v4 6.5 MEDIUM· v3 N/A· v2 TOTOLINK CA600-PoE V5.3c.6665_B20180820 was found to contain a command injection vulnerability in the CloudSrvUserdataVersionCheck function via the url parameter. This vulnerability allows attackers to execute arbitrary...Show more TOTOLINK CA600-PoE V5.3c.6665_B20180820 was found to contain a command injection vulnerability in the CloudSrvUserdataVersionCheck function via the url parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request.Show less
CVE-2025-44842 1Totolink 1Ca600 Poe Firmware Jun 17, 2026 May 1, 2025 N/A· v4 6.5 MEDIUM· v3 N/A· v2 TOTOLINK CA600-PoE V5.3c.6665_B20180820 was found to contain a command injection vulnerability in the msg_process function via the Port parameter. This vulnerability allows attackers to execute arbitrary commands via a c...Show more TOTOLINK CA600-PoE V5.3c.6665_B20180820 was found to contain a command injection vulnerability in the msg_process function via the Port parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request.Show less
CVE-2025-44841 1Totolink 1Ca600 Poe Firmware Jun 17, 2026 May 1, 2025 N/A· v4 6.5 MEDIUM· v3 N/A· v2 TOTOLINK CA600-PoE V5.3c.6665_B20180820 was found to contain a command injection vulnerability in the CloudSrvUserdataVersionCheck function via the version parameter. This vulnerability allows attackers to execute arbitr...Show more TOTOLINK CA600-PoE V5.3c.6665_B20180820 was found to contain a command injection vulnerability in the CloudSrvUserdataVersionCheck function via the version parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request.Show less
CVE-2025-44840 1Totolink 1Ca600 Poe Firmware Jun 17, 2026 May 1, 2025 N/A· v4 6.5 MEDIUM· v3 N/A· v2 TOTOLINK CA600-PoE V5.3c.6665_B20180820 was found to contain a command injection vulnerability in the CloudSrvUserdataVersionCheck function via the svn parameter. This vulnerability allows attackers to execute arbitrary...Show more TOTOLINK CA600-PoE V5.3c.6665_B20180820 was found to contain a command injection vulnerability in the CloudSrvUserdataVersionCheck function via the svn parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request.Show less
CVE-2025-44839 1Totolink 1Ca600 Poe Firmware Jun 17, 2026 May 1, 2025 N/A· v4 6.5 MEDIUM· v3 N/A· v2 TOTOLINK CA600-PoE V5.3c.6665_B20180820 was found to contain a command injection vulnerability in the CloudSrvUserdataVersionCheck function via the magicid parameter. This vulnerability allows attackers to execute arbitr...Show more TOTOLINK CA600-PoE V5.3c.6665_B20180820 was found to contain a command injection vulnerability in the CloudSrvUserdataVersionCheck function via the magicid parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request.Show less