Approved changes feed: RSS · Atom

cpe:2.3:o:totolink:cp900l_firmware:*:*:*:*:*:*:*:*

part: o version: * update: *

VendorTotolink (fa0129e6-aa24-5784-be77-22d8becdb79b)
ProductCp900L Firmware (0a1a0d8b-bf60-50c7-ba8a-ce95fa644cb4)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-35397 vulnerable 2026-06-08 06:39:41.930622 Details available
TOTOLINK CP900L v4.1.5cu.798_B20221228 weas discovered to contain a command injection vulnerability in the NTPSyncWithHost function via the hostTime parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request.
Published: 2024-05-28T14:33:46.331Z
Updated: 2026-07-09T00:31:02.548Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.