CF
Product
Cp900 Firmware
13
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 9High 0Medium 4Low 0
Watch
Add Cp900 Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-7464 | 9.8 | Aug 5 | A vulnerability, which was classified as critical, has been found in TOTOLINK CP900 6.3c.566 Affected: 6.3c.566 |
| CVE-2024-7463 | 9.8 | Aug 5 | A vulnerability classified as critical was found in TOTOLINK CP900 6.3c.566 Affected: 6.3c.566 |
| CVE-2022-28495 | 9.8 | Mar 24 | TOTOLink outdoor CPE CP900 V6.3c.566_B20171026 is discovered to contain a command injection vulnerability in the setWebWlanIdx function via the webWlanIdx parameter Affected: 6.3c.566_b20171026 |
| CVE-2022-28496 | 9.8 | Mar 23 | TOTOLink outdoor CPE CP900 V6.3c.566_B20171026 discovered to contain a command injection vulnerability in the setPasswordCfg function via the adminuser and adminpassparameter Affected: 6.3c.566_b20171026 |
| CVE-2022-28497 | 9.8 | Mar 23 | TOTOLink outdoor CPE CP900 V6.3c.566_B20171026 is discovered to contain a command injection vulnerability in the mtd_write_bootloader function via the filename parameter Affected: 6.3c.566_b20171026 |
| CVE-2022-28493 | 9.8 | Mar 23 | A vulnerability in TOTOLINK CP900 V6.3c.566 allows attackers to start the Telnet service, Affected: 6.3c.566 |
| CVE-2022-28491 | 9.8 | Mar 23 | TOTOLink outdoor CPE CP900 V6.3c.566_B20171026 contains a command injection vulnerability in the NTPSyncWithHost function via the host_name parameter Affected: 6.3c.566_b20171026 |
| CVE-2022-28492 | 9.8 | Mar 23 | TOTOLINK Technology CPE with firmware V6.3c.566 ,allows remote attackers to bypass Login Affected: 6.3c.566 |
| CVE-2022-28494 | 9.8 | Mar 23 | TOTOLink outdoor CPE CP900 V6.3c.566_B20171026 is discovered to contain a command injection vulnerability in the setUpgradeFW function via the filename parameter Affected: 6.3c.566_b20171026 |
Showing 9
