GCVE - cpe:2.3:o:totolink:ca300-poe_firmware:6.2c.884:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:o:totolink:ca300-poe_firmware:6.2c.884:*:*:*:*:*:*:*

part: o version: 6.2c.884 update: *

Vendor	Totolink (`fa0129e6-aa24-5784-be77-22d8becdb79b`)
Product	Ca300 Poe Firmware (`f6a50b73-7907-582c-9a27-cc1467bf95f8`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2025-6621`	vulnerable	2026-06-08 07:43:15.697912	TOTOLINK CA300-PoE ap.so QuickSetting os command injection MEDIUM (6.3) A vulnerability classified as critical has been found in TOTOLINK CA300-PoE 6.2c.884. This affects the function QuickSetting of the file ap.so. The manipulation of the argument hour/minute leads to os command injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Published: 2025-06-25T18:00:16.473Z Updated: 2025-06-26T13:33:07.803Z Open on db.gcve.eu Reference links https://vuldb.com/?id.313839 https://vuldb.com/?ctiid.313839 https://vuldb.com/?submit.602266 https://github.com/wudipjq/my_vuln/blob/main/totolink4/vuln_47/47.md https://github.com/wudipjq/my_vuln/blob/main/totolink4/vuln_47/47.md#poc	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-6620`	vulnerable	2026-06-08 07:43:15.697255	TOTOLINK CA300-PoE upgrade.so setUpgradeUboot os command injection MEDIUM (6.3) A vulnerability was found in TOTOLINK CA300-PoE 6.2c.884. It has been rated as critical. Affected by this issue is the function setUpgradeUboot of the file upgrade.so. The manipulation of the argument FileName leads to os command injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Published: 2025-06-25T18:00:14.138Z Updated: 2025-06-26T13:33:58.901Z Open on db.gcve.eu Reference links https://vuldb.com/?id.313838 https://vuldb.com/?ctiid.313838 https://vuldb.com/?submit.602265 https://github.com/wudipjq/my_vuln/blob/main/totolink4/vuln_46/46.md https://github.com/wudipjq/my_vuln/blob/main/totolink4/vuln_46/46.md#poc	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-6619`	vulnerable	2026-06-08 07:43:15.696802	TOTOLINK CA300-PoE upgrade.so setUpgradeFW os command injection MEDIUM (6.3) A vulnerability was found in TOTOLINK CA300-PoE 6.2c.884. It has been declared as critical. Affected by this vulnerability is the function setUpgradeFW of the file upgrade.so. The manipulation of the argument FileName leads to os command injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Published: 2025-06-25T17:31:10.779Z Updated: 2025-06-25T17:52:47.782Z Open on db.gcve.eu Reference links https://vuldb.com/?id.313837 https://vuldb.com/?ctiid.313837 https://vuldb.com/?submit.602264 https://github.com/wudipjq/my_vuln/blob/main/totolink4/vuln_45/45.md https://github.com/wudipjq/my_vuln/blob/main/totolink4/vuln_45/45.md#poc	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-6618`	vulnerable	2026-06-08 07:43:15.694944	TOTOLINK CA300-PoE wps.so SetWLanApcliSettings os command injection MEDIUM (6.3) A vulnerability was found in TOTOLINK CA300-PoE 6.2c.884. It has been classified as critical. Affected is the function SetWLanApcliSettings of the file wps.so. The manipulation of the argument PIN leads to os command injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Published: 2025-06-25T17:31:07.361Z Updated: 2025-06-25T17:53:30.513Z Open on db.gcve.eu Reference links https://vuldb.com/?id.313836 https://vuldb.com/?ctiid.313836 https://vuldb.com/?submit.602263 https://github.com/wudipjq/my_vuln/blob/main/totolink4/vuln_44/44.md https://github.com/wudipjq/my_vuln/blob/main/totolink4/vuln_44/44.md#poc	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-7217`	vulnerable	2026-06-08 06:58:21.545857	TOTOLINK CA300-PoE cstecgi.cgi loginauth buffer overflow MEDIUM (6.3) A vulnerability was found in TOTOLINK CA300-PoE 6.2c.884. It has been declared as critical. This vulnerability affects the function loginauth of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument password leads to buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-272788. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Published: 2024-07-30T04:31:04.864Z Updated: 2024-08-01T21:52:31.497Z Open on db.gcve.eu Reference links https://vuldb.com/?id.272788 https://vuldb.com/?ctiid.272788 https://vuldb.com/?submit.378333 https://github.com/abcdefg-png/IoT-vulnerable/blob/main/TOTOLINK/CA300-PoE/loginauth_password.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-24161`	vulnerable	2026-06-08 05:56:05.197844	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-24160`	vulnerable	2026-06-08 05:56:05.197429	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-24159`	vulnerable	2026-06-08 05:56:05.197118	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-24149`	vulnerable	2026-06-08 05:56:05.188844	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-24148`	vulnerable	2026-06-08 05:56:05.188497	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-24147`	vulnerable	2026-06-08 05:56:05.188009	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-24146`	vulnerable	2026-06-08 05:56:05.187661	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-24145`	vulnerable	2026-06-08 05:56:05.187315	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-24144`	vulnerable	2026-06-08 05:56:05.186961	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-24143`	vulnerable	2026-06-08 05:56:05.186608	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-24142`	vulnerable	2026-06-08 05:56:05.186248	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-24141`	vulnerable	2026-06-08 05:56:05.185890	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-24140`	vulnerable	2026-06-08 05:56:05.185416	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-24139`	vulnerable	2026-06-08 05:56:05.184905	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-24138`	vulnerable	2026-06-08 05:56:05.183637	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

TOTOLINK CA300-PoE Firmware 6.2c.884

PURL mappings

Vulnerability references

Contribute