Approved changes feed: RSS · Atom
cpe:2.3:a:totolink:ca750-poe:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Totolink (fa0129e6-aa24-5784-be77-22d8becdb79b) |
|---|---|
| Product | Ca750 Poe (11413dc5-990f-57f0-9b52-9ae5d079ed5a) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-9534 |
vulnerable | 2026-06-08 08:08:59.019951 |
Totolink CA750-PoE Setting cstecgi.cgi setWiFiWpsConfig os command injection
MEDIUM (6.3)
A flaw has been found in Totolink CA750-PoE 6.2c.510. This affects the function setWiFiWpsConfig of the file /cgi-bin/cstecgi.cgi of the component Setting Handler. Executing a manipulation of the argument PIN can lead to os command injection. It is possible to launch the attack remotely. The exploit has been published and may be used.
Published: 2026-05-26T05:30:11.573Z
Updated: 2026-05-26T12:24:50.903Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-9533 |
vulnerable | 2026-06-08 08:08:59.019836 |
Totolink CA750-PoE Setting cstecgi.cgi recvUpgradeNewFw os command injection
MEDIUM (6.3)
A vulnerability was detected in Totolink CA750-PoE 6.2c.510. The impacted element is the function recvUpgradeNewFw of the file /cgi-bin/cstecgi.cgi of the component Setting Handler. Performing a manipulation of the argument fwUrl/magicid results in os command injection. It is possible to initiate the attack remotely. The exploit is now public and may be used.
Published: 2026-05-26T05:15:08.872Z
Updated: 2026-05-27T20:01:48.548Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-9532 |
vulnerable | 2026-06-08 08:08:59.019611 |
Totolink CA750-PoE Setting cstecgi.cgi setUploadUserData os command injection
MEDIUM (6.3)
A security vulnerability has been detected in Totolink CA750-PoE 6.2c.510. The affected element is the function setUploadUserData of the file /cgi-bin/cstecgi.cgi of the component Setting Handler. Such manipulation of the argument FileName leads to os command injection. The attack may be performed from remote. The exploit has been disclosed publicly and may be used.
Published: 2026-05-26T05:00:14.815Z
Updated: 2026-05-26T12:35:34.673Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-9531 |
vulnerable | 2026-06-08 08:08:59.019491 |
Totolink CA750-PoE Setting cstecgi.cgi setUpgradeUboot os command injection
MEDIUM (6.3)
A weakness has been identified in Totolink CA750-PoE 6.2c.510. Impacted is the function setUpgradeUboot of the file /cgi-bin/cstecgi.cgi of the component Setting Handler. This manipulation of the argument FileName causes os command injection. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be used for attacks.
Published: 2026-05-26T04:45:14.640Z
Updated: 2026-05-28T15:23:42.160Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-9513 |
vulnerable | 2026-06-08 08:08:59.009063 |
Totolink CA750-PoE Setting cstecgi.cgi NTPSyncWithHost os command injection
MEDIUM (6.3)
A weakness has been identified in Totolink CA750-PoE 6.2c.510. This issue affects the function NTPSyncWithHost of the file /cgi-bin/cstecgi.cgi of the component Setting Handler. Executing a manipulation of the argument host_time can lead to os command injection. The attack can be launched remotely. The exploit has been made available to the public and could be used for attacks.
Published: 2026-05-25T22:30:12.005Z
Updated: 2026-05-28T12:49:49.899Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-9512 |
vulnerable | 2026-06-08 08:08:59.008804 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-9511 |
vulnerable | 2026-06-08 08:08:59.008486 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.