CF
Product
Ca300-poe Firmware
24
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 18High 2Medium 4Low 0
Watch
Add Ca300-poe Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-6621 | 9.8 | Jun 25 | A vulnerability classified as critical has been found in TOTOLINK CA300-PoE 6.2c.884 Affected: 6.2c.884 |
| CVE-2025-6620 | 9.8 | Jun 25 | A vulnerability was found in TOTOLINK CA300-PoE 6.2c.884 Affected: 6.2c.884 |
| CVE-2025-6619 | 9.8 | Jun 25 | A vulnerability was found in TOTOLINK CA300-PoE 6.2c.884 Affected: 6.2c.884 |
| CVE-2025-6618 | 9.8 | Jun 25 | A vulnerability was found in TOTOLINK CA300-PoE 6.2c.884 Affected: 6.2c.884 |
| CVE-2023-24161 | 9.8 | Feb 14 | TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the webWlanIdx parameter in the setWebWlanIdx function Affected: 6.2c.884 |
| CVE-2023-24160 | 9.8 | Feb 14 | TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the admuser parameter in the setPasswordCfg function Affected: 6.2c.884 |
| CVE-2023-24159 | 9.8 | Feb 14 | TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the admpass parameter in the setPasswordCfg function Affected: 6.2c.884 |
| CVE-2023-24149 | 9.8 | Feb 3 | TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a hard code password for root which is stored in the component /etc/shadow Affected: 6.2c.884 |
| CVE-2023-24148 | 9.8 | Feb 3 | TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the FileName parameter in the setUploadUserData function Affected: 6.2c.884 |
| CVE-2023-24146 | 9.8 | Feb 3 | TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the minute parameter in the setRebootScheCfg function Affected: 6.2c.884 |
| CVE-2023-24145 | 9.8 | Feb 3 | TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the plugin_version parameter in the setUnloadUserData function Affected: 6.2c.884 |
| CVE-2023-24144 | 9.8 | Feb 3 | TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the hour parameter in the setRebootScheCfg function Affected: 6.2c.884 |
| CVE-2023-24143 | 9.8 | Feb 3 | TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the NetDiagTracertHop parameter in the setNetworkDiag function Affected: 6.2c.884 |
| CVE-2023-24142 | 9.8 | Feb 3 | TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the NetDiagPingSize parameter in the setNetworkDiag function Affected: 6.2c.884 |
| CVE-2023-24141 | 9.8 | Feb 3 | TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the NetDiagPingTimeOut parameter in the setNetworkDiag function Affected: 6.2c.884 |
| CVE-2023-24140 | 9.8 | Feb 3 | TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the NetDiagPingNum parameter in the setNetworkDiag function Affected: 6.2c.884 |
| CVE-2023-24139 | 9.8 | Feb 3 | TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the NetDiagHost parameter in the setNetworkDiag function Affected: 6.2c.884 |
| CVE-2023-24138 | 9.8 | Feb 3 | TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the host_time parameter in the NTPSyncWithHost function Affected: 6.2c.884 |
| CVE-2024-7217 | 8.8 | Jul 30 | A vulnerability was found in TOTOLINK CA300-PoE 6.2c.884 Affected: 6.2c.884 |
| CVE-2023-24147 | 7.5 | Feb 3 | TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a hard code password for the telnet service which is stored in the component /etc/config/product.ini Affected: 6.2c.884 |
| CVE-2025-44863 | 6.5 | May 1 | TOTOLINK CA300-POE V6.2c.884_B20180522 was found to contain a command injection vulnerability in the msg_process function via the Url parameter Affected: 6.2c.884_b20180522 |
| CVE-2025-44860 | 6.5 | May 1 | TOTOLINK CA300-POE V6.2c.884_B20180522 was found to contain a command injection vulnerability in the msg_process function via the Port parameter Affected: 6.2c.884_b20180522 |
| CVE-2025-44862 | 6.3 | May 1 | TOTOLINK CA300-POE V6.2c.884_B20180522 was found to contain a command injection vulnerability in the recvUpgradeNewFw function via the fwUrl parameter Affected: 6.2c.884_b20180522 |
| CVE-2025-44861 | 6.3 | May 1 | TOTOLINK CA300-POE V6.2c.884_B20180522 was found to contain a command injection vulnerability in the CloudSrvUserdataVersionCheck function via the url parameter Affected: 6.2c.884_b20180522 |
Showing 24