medium6.5
CVE-2025-44843
TOTOLINK CA600-PoE V5.3c.6665_B20180820 was found to contain a command injection vulnerability in the CloudSrvUserdataVersionCheck function via the url paramet…
Impact
TOTOLINK CA600-PoE V5.3c.6665_B20180820 was found to contain a command injection vulnerability in the CloudSrvUserdataVersionCheck function via the url parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Totolink | Ca600-Poe Firmware | Version 5.3c.6665_b20180820* |