Login Request a demo
CF
Product
Ca300-poe Firmware
by Totolink · last CVE Jun 25, 2025
24
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities24In the news0Timeline
Severity mix
Critical 18High 2Medium 4Low 0
Severity
All severities24Critical18High2Medium4Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Ca300-poe Firmware to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-6621
9.8
2%
Jun 25
A vulnerability classified as critical has been found in TOTOLINK CA300-PoE 6.2c.884
Affected: 6.2c.884
CVE-2025-6620
9.8
2%
Jun 25
A vulnerability was found in TOTOLINK CA300-PoE 6.2c.884
Affected: 6.2c.884
CVE-2025-6619
9.8
2%
Jun 25
A vulnerability was found in TOTOLINK CA300-PoE 6.2c.884
Affected: 6.2c.884
CVE-2025-6618
9.8
2%
Jun 25
A vulnerability was found in TOTOLINK CA300-PoE 6.2c.884
Affected: 6.2c.884
CVE-2023-24161
9.8
2%
Feb 14
TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the webWlanIdx parameter in the setWebWlanIdx function
Affected: 6.2c.884
CVE-2023-24160
9.8
2%
Feb 14
TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the admuser parameter in the setPasswordCfg function
Affected: 6.2c.884
CVE-2023-24159
9.8
2%
Feb 14
TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the admpass parameter in the setPasswordCfg function
Affected: 6.2c.884
CVE-2023-24149
9.8
1%
Feb 3
TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a hard code password for root which is stored in the component /etc/shadow
Affected: 6.2c.884
CVE-2023-24148
9.8
2%
Feb 3
TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the FileName parameter in the setUploadUserData function
Affected: 6.2c.884
CVE-2023-24146
9.8
2%
Feb 3
TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the minute parameter in the setRebootScheCfg function
Affected: 6.2c.884
CVE-2023-24145
9.8
2%
Feb 3
TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the plugin_version parameter in the setUnloadUserData function
Affected: 6.2c.884
CVE-2023-24144
9.8
2%
Feb 3
TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the hour parameter in the setRebootScheCfg function
Affected: 6.2c.884
CVE-2023-24143
9.8
2%
Feb 3
TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the NetDiagTracertHop parameter in the setNetworkDiag function
Affected: 6.2c.884
CVE-2023-24142
9.8
2%
Feb 3
TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the NetDiagPingSize parameter in the setNetworkDiag function
Affected: 6.2c.884
CVE-2023-24141
9.8
2%
Feb 3
TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the NetDiagPingTimeOut parameter in the setNetworkDiag function
Affected: 6.2c.884
CVE-2023-24140
9.8
2%
Feb 3
TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the NetDiagPingNum parameter in the setNetworkDiag function
Affected: 6.2c.884
CVE-2023-24139
9.8
2%
Feb 3
TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the NetDiagHost parameter in the setNetworkDiag function
Affected: 6.2c.884
CVE-2023-24138
9.8
2%
Feb 3
TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the host_time parameter in the NTPSyncWithHost function
Affected: 6.2c.884
Showing 18