Ca600 Poe Firmware
Approved changes feed: RSS · Atom
cpe:2.3:o:totolink:ca600-poe_firmware:5.3c.6665_b20180820*:*:*:*:*:*:*:*
part: o version: 5.3c.6665_b20180820* update: *
| Vendor | Totolink (fa0129e6-aa24-5784-be77-22d8becdb79b) |
|---|---|
| Product | Ca600 Poe Firmware (ffde8bef-febe-509e-acbb-dd2bf0e9e3d2) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-44848 |
vulnerable | 2026-06-08 07:25:10.744003 |
Details available
TOTOLINK CA600-PoE V5.3c.6665_B20180820 was found to contain a command injection vulnerability in the msg_process function via the Url parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request.
Published: 2025-05-01T00:00:00.000Z
Updated: 2025-05-02T18:09:55.403Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-44847 |
vulnerable | 2026-06-08 07:25:10.743723 |
Details available
TOTOLINK CA600-PoE V5.3c.6665_B20180820 was found to contain a command injection vulnerability in the setWebWlanIdx function via the webWlanIdx parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request.
Published: 2025-05-01T00:00:00.000Z
Updated: 2025-05-01T20:30:09.658Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-44846 |
vulnerable | 2026-06-08 07:25:10.743324 |
Details available
TOTOLINK CA600-PoE V5.3c.6665_B20180820 was found to contain a command injection vulnerability in the recvUpgradeNewFw function via the fwUrl parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request.
Published: 2025-05-01T00:00:00.000Z
Updated: 2025-05-01T20:31:10.359Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-44845 |
vulnerable | 2026-06-08 07:25:10.743061 |
Details available
TOTOLINK CA600-PoE V5.3c.6665_B20180820 was found to contain a command injection vulnerability in the NTPSyncWithHost function via the hostTime parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request.
Published: 2025-05-01T00:00:00.000Z
Updated: 2025-05-02T15:35:41.214Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-44844 |
vulnerable | 2026-06-08 07:25:10.742839 |
Details available
TOTOLINK CA600-PoE V5.3c.6665_B20180820 was found to contain a command injection vulnerability in the setUpgradeFW function via the FileName parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request.
Published: 2025-05-01T00:00:00.000Z
Updated: 2025-05-02T15:36:34.867Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-44843 |
vulnerable | 2026-06-08 07:25:10.742552 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-44842 |
vulnerable | 2026-06-08 07:25:10.742149 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-44841 |
vulnerable | 2026-06-08 07:25:10.741865 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-44840 |
vulnerable | 2026-06-08 07:25:10.741568 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-44839 |
vulnerable | 2026-06-08 07:25:10.740378 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.