CVE-2025-44842

CVE-2025-44842 affects TOTOLINK CA600-PoE (V5.3c.6665_B20180820). A vulnerability in the msg_process function, via the Port parameter, allows command injection by crafting a request. The root cause is insufficient filtering/validation of command-related characters in that parameter, enabling arbi...

CVE-2025-44847

CVE-2025-44847 affects TOTOLINK CA600-PoE, specifically version 5.3c.6665_B20180820. The root cause is a command injection vulnerability in the setWebWlanIdx function triggered by the webWlanIdx parameter, allowing an attacker to execute arbitrary commands via a crafted request. CVSS metrics (rep...

CVE-2025-44848

TOTOLINK CA600-PoE, version 5.3c.6665_B20180820, contains a command injection flaw in the msg_process function triggered by the Url parameter. The vulnerability permits execution of arbitrary commands via a crafted request, with the CVE-2025-44848 entry documenting a network-facing exposure (base...

CVE-2025-44843

CVE-2025-44843 affects TOTOLINK CA600-PoE (V5.3c.6665_B20180820). A command-injection vulnerability exists in CloudSrvUserdataVersionCheck via the url parameter, enabling arbitrary command execution. Reported across multiple sources (NVD, Red Hat, CNVD, CVE.org, etc.), with CVSSv3.1: Network atta...

CVE-2025-44843

TOTOLINK CA600-PoE V5.3c.6665B20180820 was found to contain a command injection vulnerability in the CloudSrvUserdataVersionCheck function via the url parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request...

CVE-2025-44845

CVE-2025-44845 affects TOTOLINK CA600-PoE V5.3c.6665_B20180820. The NTPSyncWithHost function is vulnerable via the hostTime parameter, allowing an attacker to execute arbitrary commands through a crafted request. Reported across multiple sources (NVD/Red Hat/CNVD) with the same vulnerability desc...

CVE-2025-44842

TOTOLINK CA600-PoE V5.3c.6665B20180820 was found to contain a command injection vulnerability in the msgprocess function via the Port parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request...

CVE-2025-44841

TOTOLINK CA600-PoE V5.3c.6665B20180820 was found to contain a command injection vulnerability in the CloudSrvUserdataVersionCheck function via the version parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request...

TOTOLINK CA600-PoE 安全漏洞

TOTOLINK CA600-PoE is an outdoor wireless AP/CPE device from China Gion Electronics TOTOLINK. TOTOLINK CA600-PoE suffers from a command injection vulnerability that stems from the failure of the magicid parameter of the CloudSrvUserdataVersionCheck function to correctly filter constructed command...

CVE-2025-44843

TOTOLINK CA600-PoE V5.3c.6665B20180820 was found to contain a command injection vulnerability in the CloudSrvUserdataVersionCheck function via the url parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request...

CVE-2025-44845

TOTOLINK CA600-PoE V5.3c.6665B20180820 was found to contain a command injection vulnerability in the NTPSyncWithHost function via the hostTime parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request...

CVE-2025-44848

TOTOLINK CA600-PoE V5.3c.6665B20180820 was found to contain a command injection vulnerability in the msgprocess function via the Url parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request...

CVE-2025-44839

TOTOLINK CA600-PoE V5.3c.6665B20180820 was found to contain a command injection vulnerability in the CloudSrvUserdataVersionCheck function via the magicid parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request...

CVE-2025-44846

TOTOLINK CA600-PoE V5.3c.6665B20180820 was found to contain a command injection vulnerability in the recvUpgradeNewFw function via the fwUrl parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request...

CVE-2025-44840

TOTOLINK CA600-PoE V5.3c.6665B20180820 was found to contain a command injection vulnerability in the CloudSrvUserdataVersionCheck function via the svn parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request...

TOTOLINK CA600-PoE 安全漏洞

TOTOLINK CA600-PoE is an outdoor wireless AP/CPE device from China Gion Electronics TOTOLINK. TOTOLINK CA600-PoE suffers from a command injection vulnerability that stems from the msgprocess function Url parameter failing to properly filter construct command special characters, commands, etc. No...

CVE-2025-44842

TOTOLINK CA600-PoE V5.3c.6665B20180820 was found to contain a command injection vulnerability in the msgprocess function via the Port parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request...

CVE-2025-44840

TOTOLINK CA600-PoE vulnerable due to a command injection in the CloudSrvUserdataVersionCheck function via the svn parameter on version 5.3c.6665_B20180820. This allows an attacker to execute arbitrary commands through a crafted request. A practical remediation from PT-2025-18661 suggests disablin...

CVE-2025-44841

Summary of CVE-2025-44841 : TOTOLINK CA600-PoE (V5.3c.6665_B20180820) contains a command injection vulnerability in the CloudSrvUserdataVersionCheck function, exploitable via the version parameter. The vulnerability allows an attacker to execute arbitrary commands through a crafted request (attac...

CVE-2025-44841

TOTOLINK CA600-PoE V5.3c.6665B20180820 was found to contain a command injection vulnerability in the CloudSrvUserdataVersionCheck function via the version parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request...