CVE-2025-44844

TOTOLINK CA600-PoE V5.3c.6665B20180820 was found to contain a command injection vulnerability in the setUpgradeFW function via the FileName parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request...

CVE-2025-44844

The TOTOLINK CA600-PoE (outdoor wireless AP/CPE) running firmware version 5.3c.6665_B20180820 is susceptible to a command injection vulnerability in its microprogramming software. The flaw resides in the setUpgradeFW() function, which fails to properly filter construct command special characters ...