Login Request a demo
CF
Product
Cp900 Firmware
by Totolink · last CVE May 1, 2025
13
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities13In the news0Timeline
Severity mix
Critical 9High 0Medium 4Low 0
Severity
All severities13Critical9High0Medium4Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Cp900 Firmware to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-7464
9.8
20%
Aug 5
A vulnerability, which was classified as critical, has been found in TOTOLINK CP900 6.3c.566
Affected: 6.3c.566
CVE-2024-7463
9.8
11%
Aug 5
A vulnerability classified as critical was found in TOTOLINK CP900 6.3c.566
Affected: 6.3c.566
CVE-2022-28495
9.8
2%
Mar 24
TOTOLink outdoor CPE CP900 V6.3c.566_B20171026 is discovered to contain a command injection vulnerability in the setWebWlanIdx function via the webWlanIdx parameter
Affected: 6.3c.566_b20171026
CVE-2022-28496
9.8
1%
Mar 23
TOTOLink outdoor CPE CP900 V6.3c.566_B20171026 discovered to contain a command injection vulnerability in the setPasswordCfg function via the adminuser and adminpassparameter
Affected: 6.3c.566_b20171026
CVE-2022-28497
9.8
1%
Mar 23
TOTOLink outdoor CPE CP900 V6.3c.566_B20171026 is discovered to contain a command injection vulnerability in the mtd_write_bootloader function via the filename parameter
Affected: 6.3c.566_b20171026
CVE-2022-28493
9.8
1%
Mar 23
A vulnerability in TOTOLINK CP900 V6.3c.566 allows attackers to start the Telnet service,
Affected: 6.3c.566
CVE-2022-28491
9.8
5%
Mar 23
TOTOLink outdoor CPE CP900 V6.3c.566_B20171026 contains a command injection vulnerability in the NTPSyncWithHost function via the host_name parameter
Affected: 6.3c.566_b20171026
CVE-2022-28492
9.8
1%
Mar 23
TOTOLINK Technology CPE with firmware V6.3c.566 ,allows remote attackers to bypass Login
Affected: 6.3c.566
CVE-2022-28494
9.8
3%
Mar 23
TOTOLink outdoor CPE CP900 V6.3c.566_B20171026 is discovered to contain a command injection vulnerability in the setUpgradeFW function via the filename parameter
Affected: 6.3c.566_b20171026
CVE-2025-44838
6.3
1%
May 1
TOTOLINK CPE CP900 V6.3c.1144_B20190715 was discovered to contain a command injection vulnerability in the setUploadUserData function via the FileName parameter
Affected: 6.3c.1144_b20190715
CVE-2025-44837
6.3
1%
May 1
TOTOLINK CPE CP900 V6.3c.1144_B20190715 was discovered to contain a command injection vulnerability in the CloudSrvUserdataVersionCheck function via the url or magicid parameters
Affected: 6.3c.1144_b20190715
CVE-2025-44836
6.3
1%
May 1
TOTOLINK CPE CP900 V6.3c.1144_B20190715 was discovered to contain a command injection vulnerability in the setApRebootScheCfg function via the hour or minute parameters
Affected: 6.3c.1144_b20190715
CVE-2025-44854
6.3
1%
May 1
TOTOLINK CP900 V6.3c.1144_B20190715 was found to contain a command injection vulnerability in the setUpgradeUboot function via the FileName parameter
Affected: 6.3c.1144_b20190715
Showing 13