CF
Product
Cp900 Firmware
13
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 9High 0Medium 4Low 0
Watch
Add Cp900 Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-44838 | 6.3 | May 1 | TOTOLINK CPE CP900 V6.3c.1144_B20190715 was discovered to contain a command injection vulnerability in the setUploadUserData function via the FileName parameter Affected: 6.3c.1144_b20190715 |
| CVE-2025-44837 | 6.3 | May 1 | TOTOLINK CPE CP900 V6.3c.1144_B20190715 was discovered to contain a command injection vulnerability in the CloudSrvUserdataVersionCheck function via the url or magicid parameters Affected: 6.3c.1144_b20190715 |
| CVE-2025-44836 | 6.3 | May 1 | TOTOLINK CPE CP900 V6.3c.1144_B20190715 was discovered to contain a command injection vulnerability in the setApRebootScheCfg function via the hour or minute parameters Affected: 6.3c.1144_b20190715 |
| CVE-2025-44854 | 6.3 | May 1 | TOTOLINK CP900 V6.3c.1144_B20190715 was found to contain a command injection vulnerability in the setUpgradeUboot function via the FileName parameter Affected: 6.3c.1144_b20190715 |
Showing 4
