CVE-2025-44836

CVE-2025-44836 concerns TOTOLINK CPE CP900 (version 6.3c.1144_B20190715). Multiple sources confirm a command injection vulnerability in the setApRebootScheCfg function, exploitable via the hour or minute parameters. The underlying issue is inadequate filtering of constructed command characters, e...

CVE-2025-44836

TOTOLINK CPE CP900 V6.3c.1144B20190715 was discovered to contain a command injection vulnerability in the setApRebootScheCfg function via the hour or minute parameters. This vulnerability allows attackers to execute arbitrary commands via a crafted request...