Totolink Ca600 Poe vulnerabilities
10 vulnerabilities
Known vulnerabilities in Totolink Ca600 Poe, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2025-44841totolinkca600-poe_firmware
EPSS score0.87%
TOTOLINK CA600-PoE V5.3c.6665_B20180820 was found to contain a command injection vulnerability in the CloudSrvUserdataVersionCheck function via the version parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request.CVE-2025-44848totolinkca600-poe_firmwareEPSS score0.87%
TOTOLINK CA600-PoE V5.3c.6665_B20180820 was found to contain a command injection vulnerability in the msg_process function via the Url parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request.CVE-2025-44845totolinkca600-poe_firmwareEPSS score0.87%
TOTOLINK CA600-PoE V5.3c.6665_B20180820 was found to contain a command injection vulnerability in the NTPSyncWithHost function via the hostTime parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request.CVE-2025-44840totolinkca600-poe_firmwareEPSS score0.87%
TOTOLINK CA600-PoE V5.3c.6665_B20180820 was found to contain a command injection vulnerability in the CloudSrvUserdataVersionCheck function via the svn parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request.CVE-2025-44843totolinkca600-poe_firmwareEPSS score1.02%
TOTOLINK CA600-PoE V5.3c.6665_B20180820 was found to contain a command injection vulnerability in the CloudSrvUserdataVersionCheck function via the url parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request.CVE-2025-44839totolinkca600-poe_firmwareEPSS score0.87%
TOTOLINK CA600-PoE V5.3c.6665_B20180820 was found to contain a command injection vulnerability in the CloudSrvUserdataVersionCheck function via the magicid parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request.CVE-2025-44847totolinkca600-poe_firmwareEPSS score0.94%
TOTOLINK CA600-PoE V5.3c.6665_B20180820 was found to contain a command injection vulnerability in the setWebWlanIdx function via the webWlanIdx parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request.CVE-2025-44846totolinkca600-poe_firmwareEPSS score0.94%
TOTOLINK CA600-PoE V5.3c.6665_B20180820 was found to contain a command injection vulnerability in the recvUpgradeNewFw function via the fwUrl parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request.CVE-2025-44842totolinkca600-poe_firmwareEPSS score0.87%
TOTOLINK CA600-PoE V5.3c.6665_B20180820 was found to contain a command injection vulnerability in the msg_process function via the Port parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request.CVE-2025-44844totolinkca600-poe_firmwareEPSS score0.87%
TOTOLINK CA600-PoE V5.3c.6665_B20180820 was found to contain a command injection vulnerability in the setUpgradeFW function via the FileName parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request.