TOTOLINK CA600-PoE msg_process function Port parameter command injection vulnerability

TOTOLINK CA600-PoE is an outdoor wireless AP/CPE device from China Gion Electronics TOTOLINK. TOTOLINK CA600-PoE suffers from a command injection vulnerability that stems from the msgprocess function Port parameter failing to correctly filter construct command special characters, commands, etc. N...

TOTOLINK CA600-PoE msg_process function Url parameter command injection vulnerability

TOTOLINK CA600-PoE is an outdoor wireless AP/CPE device from China Gion Electronics TOTOLINK. TOTOLINK CA600-PoE suffers from a command injection vulnerability that stems from the msgprocess function Url parameter failing to properly filter construct command special characters, commands, etc. No...

CVE-2025-44860

TOTOLINK CA300-POE V6.2c.884B20180522 was found to contain a command injection vulnerability in the msgprocess function via the Port parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request...

CVE-2025-44860

TOTOLINK CA300-POE V6.2c.884B20180522 was found to contain a command injection vulnerability in the msgprocess function via the Port parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request...

CVE-2025-44842

The TOTOLINK CA600-PoE outdoor wireless AP/CPE (version V5.3c.6665_B20180820 ) is vulnerable to a command injection vulnerability. The issue originates in the msg_process function because the Port parameter fails to properly filter special characters and commands. A remote attacker can exploit th...

CVE-2025-44860

The TOTOLINK CA300-POE wireless access point, specifically version V6.2c.884_B20180522 , contains a command injection vulnerability in the msg_process function. The root cause is a failure to correctly filter special characters and commands within the Port parameter, allowing an intruder to execu...