VulnCheck KEV: CVE-2025-44846

TOTOLINK CA600-PoE V5.3c.6665B20180820 was found to contain a command injection vulnerability in the recvUpgradeNewFw function via the fwUrl parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request...

CVE-2025-55588

TOTOLINK A3002R (firmware version 4.0.0-B20230531.1404) is affected by a buffer overflow in the fw_ip parameter of the /boafrm/formPortFw API. The overflow could be triggered by crafted input, leading to Denial of Service. Public documentation across multiple sources corroborates the model and af...