CVE-2025-44863

TOTOLINK CA300-POE V6.2c.884B20180522 was found to contain a command injection vulnerability in the msgprocess function via the Url parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request...

CVE-2025-44863

TOTOLINK CA300-POE (V6.2c.884_B20180522) contains a command injection in the msg_process function via the Url parameter, allowing arbitrary command execution through a crafted request (CVE-2025-44863). The CVSS v3.1 base score is 6.5 (Network, Low attack complexity, No privileges, User interactio...