VulnCheck KEV: CVE-2025-44846

TOTOLINK CA600-PoE V5.3c.6665B20180820 was found to contain a command injection vulnerability in the recvUpgradeNewFw function via the fwUrl parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request...

CVE-2025-55588

The TOTOLINK A3002R router, specifically version 4.0.0-B20230531.1404 , is vulnerable to a buffer overflow in the fw_ip parameter of the /boafrm/formPortFw API endpoint. The root cause is that the input is copied directly to a fixed-length stack buffer without performing length or character check...