GCVE - cpe:2.3:h:totolink:cp900:-:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:h:totolink:cp900:-:*:*:*:*:*:*:*

part: h version: - update: *

Vendor	Totolink (`fa0129e6-aa24-5784-be77-22d8becdb79b`)
Product	Cp900 (`447475ad-e67e-51b4-82f5-a53ed1d20a01`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2025-44854`	not_vulnerable	2026-06-08 07:25:10.744449	Details available TOTOLINK CP900 V6.3c.1144_B20190715 was found to contain a command injection vulnerability in the setUpgradeUboot function via the FileName parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request. Published: 2025-05-01T00:00:00.000Z Updated: 2025-05-01T20:35:36.428Z Open on db.gcve.eu Reference links https://github.com/Summermu/VulnForIoT/tree/main/Totolink_CP900/setUpgradeUboot/readme.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-44838`	not_vulnerable	2026-06-08 07:25:10.738497	Details available TOTOLINK CPE CP900 V6.3c.1144_B20190715 was discovered to contain a command injection vulnerability in the setUploadUserData function via the FileName parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request. Published: 2025-05-01T00:00:00.000Z Updated: 2025-05-01T20:33:19.508Z Open on db.gcve.eu Reference links https://github.com/n0wstr/IOTVuln/tree/main/CP900/setUploadUserData	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-44837`	not_vulnerable	2026-06-08 07:25:10.738054	Details available TOTOLINK CPE CP900 V6.3c.1144_B20190715 was discovered to contain a command injection vulnerability in the CloudSrvUserdataVersionCheck function via the url or magicid parameters. This vulnerability allows attackers to execute arbitrary commands via a crafted request. Published: 2025-05-01T00:00:00.000Z Updated: 2025-05-01T20:34:44.689Z Open on db.gcve.eu Reference links https://github.com/n0wstr/IOTVuln/tree/main/CP900/CloudSrvUserdataVersionCheck	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-44836`	not_vulnerable	2026-06-08 07:25:10.737680	Details available TOTOLINK CPE CP900 V6.3c.1144_B20190715 was discovered to contain a command injection vulnerability in the setApRebootScheCfg function via the hour or minute parameters. This vulnerability allows attackers to execute arbitrary commands via a crafted request. Published: 2025-05-01T00:00:00.000Z Updated: 2025-05-01T20:32:00.261Z Open on db.gcve.eu Reference links https://github.com/n0wstr/IOTVuln/tree/main/CP900/setApRebootScheCfg	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-7464`	not_vulnerable	2026-06-08 06:58:22.236548	TOTOLINK CP900 Telnet Service setTelnetCfg command injection MEDIUM (6.3) A vulnerability, which was classified as critical, has been found in TOTOLINK CP900 6.3c.566. This issue affects the function setTelnetCfg of the component Telnet Service. The manipulation of the argument telnet_enabled leads to command injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-273557 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Published: 2024-08-05T01:00:06.527Z Updated: 2024-08-05T15:41:34.346Z Open on db.gcve.eu Reference links https://vuldb.com/?id.273557 https://vuldb.com/?ctiid.273557 https://vuldb.com/?submit.381334 https://github.com/abcdefg-png/IoT-vulnerable/blob/main/TOTOLINK/CP900/setTelnetCfg.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-7464`	vulnerable	2026-06-08 06:58:22.236227	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-7463`	not_vulnerable	2026-06-08 06:58:22.235546	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-35396`	vulnerable	2026-06-08 06:39:41.927713	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-28497`	not_vulnerable	2026-06-08 05:42:44.561390	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-28496`	not_vulnerable	2026-06-08 05:42:44.560991	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-28495`	not_vulnerable	2026-06-08 05:42:44.560597	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-28494`	not_vulnerable	2026-06-08 05:42:44.559960	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-28493`	not_vulnerable	2026-06-08 05:42:44.559353	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-28492`	not_vulnerable	2026-06-08 05:42:44.558865	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-28491`	not_vulnerable	2026-06-08 05:42:44.557204	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.