TOTOLINK CP900 Firmware 6.3c.566 B20171026
Approved changes feed: RSS · Atom
cpe:2.3:o:totolink:cp900_firmware:6.3c.566_b20171026:*:*:*:*:*:*:*
part: o version: 6.3c.566_b20171026 update: *
| Vendor | Totolink (fa0129e6-aa24-5784-be77-22d8becdb79b) |
|---|---|
| Product | Cp900 Firmware (ba5b19af-d44b-592d-bd45-af717a46894b) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2022-28497 |
vulnerable | 2026-06-08 05:42:44.561267 |
Details available
TOTOLink outdoor CPE CP900 V6.3c.566_B20171026 is discovered to contain a command injection vulnerability in the mtd_write_bootloader function via the filename parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request.
Published: 2023-03-23T00:00:00.000Z
Updated: 2025-02-25T15:45:46.154Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-28496 |
vulnerable | 2026-06-08 05:42:44.560971 |
Details available
TOTOLink outdoor CPE CP900 V6.3c.566_B20171026 discovered to contain a command injection vulnerability in the setPasswordCfg function via the adminuser and adminpassparameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request.
Published: 2023-03-23T00:00:00.000Z
Updated: 2025-02-25T15:46:34.485Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-28495 |
vulnerable | 2026-06-08 05:42:44.560475 |
Details available
TOTOLink outdoor CPE CP900 V6.3c.566_B20171026 is discovered to contain a command injection vulnerability in the setWebWlanIdx function via the webWlanIdx parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request.
Published: 2023-03-24T00:00:00.000Z
Updated: 2025-02-20T19:03:45.329Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-28494 |
vulnerable | 2026-06-08 05:42:44.559855 |
Details available
TOTOLink outdoor CPE CP900 V6.3c.566_B20171026 is discovered to contain a command injection vulnerability in the setUpgradeFW function via the filename parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request.
Published: 2023-03-23T00:00:00.000Z
Updated: 2025-02-25T15:48:30.268Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-28491 |
vulnerable | 2026-06-08 05:42:44.556362 |
Details available
TOTOLink outdoor CPE CP900 V6.3c.566_B20171026 contains a command injection vulnerability in the NTPSyncWithHost function via the host_name parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request.
Published: 2023-03-23T00:00:00.000Z
Updated: 2025-02-25T15:52:07.001Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.