← Database

CVE-2025-44838

MEDIUM CVSS: 6.3 Published: 2025-05-01 Modified: 2026-06-17

Description

TOTOLINK CPE CP900 V6.3c.1144_B20190715 was discovered to contain a command injection vulnerability in the setUploadUserData function via the FileName parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request.

Affected Platforms

Totolink Cp900Totolink Cp900 Firmware

Weakness Type

CWE-77

References