Login Request a demo
CF
Product
Ca600-poe Firmware
by Totolink · last CVE May 1, 2025
10
CVEs
0
On KEV
6.5
Max CVSS
0
New 30D
Vulnerabilities10In the news0Timeline
Severity mix
Critical 0High 0Medium 10Low 0
Severity
All severities10Critical0High0Medium10Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Ca600-poe Firmware to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-44848
6.5
1%
May 1
TOTOLINK CA600-PoE V5.3c.6665_B20180820 was found to contain a command injection vulnerability in the msg_process function via the Url parameter
Affected: 5.3c.6665_b20180820*
CVE-2025-44845
6.5
1%
May 1
TOTOLINK CA600-PoE V5.3c.6665_B20180820 was found to contain a command injection vulnerability in the NTPSyncWithHost function via the hostTime parameter
Affected: 5.3c.6665_b20180820*
CVE-2025-44844
6.5
1%
May 1
TOTOLINK CA600-PoE V5.3c.6665_B20180820 was found to contain a command injection vulnerability in the setUpgradeFW function via the FileName parameter
Affected: 5.3c.6665_b20180820*
CVE-2025-44843
6.5
1%
May 1
TOTOLINK CA600-PoE V5.3c.6665_B20180820 was found to contain a command injection vulnerability in the CloudSrvUserdataVersionCheck function via the url parameter
Affected: 5.3c.6665_b20180820*
CVE-2025-44842
6.5
1%
May 1
TOTOLINK CA600-PoE V5.3c.6665_B20180820 was found to contain a command injection vulnerability in the msg_process function via the Port parameter
Affected: 5.3c.6665_b20180820*
CVE-2025-44841
6.5
1%
May 1
TOTOLINK CA600-PoE V5.3c.6665_B20180820 was found to contain a command injection vulnerability in the CloudSrvUserdataVersionCheck function via the version parameter
Affected: 5.3c.6665_b20180820*
CVE-2025-44840
6.5
1%
May 1
TOTOLINK CA600-PoE V5.3c.6665_B20180820 was found to contain a command injection vulnerability in the CloudSrvUserdataVersionCheck function via the svn parameter
Affected: 5.3c.6665_b20180820*
CVE-2025-44839
6.5
1%
May 1
TOTOLINK CA600-PoE V5.3c.6665_B20180820 was found to contain a command injection vulnerability in the CloudSrvUserdataVersionCheck function via the magicid parameter
Affected: 5.3c.6665_b20180820*
CVE-2025-44847
6.3
1%
May 1
TOTOLINK CA600-PoE V5.3c.6665_B20180820 was found to contain a command injection vulnerability in the setWebWlanIdx function via the webWlanIdx parameter
Affected: 5.3c.6665_b20180820*
CVE-2025-44846
6.3
1%
May 1
TOTOLINK CA600-PoE V5.3c.6665_B20180820 was found to contain a command injection vulnerability in the recvUpgradeNewFw function via the fwUrl parameter
Affected: 5.3c.6665_b20180820*
Showing 10