← Database

CVE-2025-44839

MEDIUM CVSS: 6.5 Published: 2025-05-01 Modified: 2026-06-17

Description

TOTOLINK CA600-PoE V5.3c.6665_B20180820 was found to contain a command injection vulnerability in the CloudSrvUserdataVersionCheck function via the magicid parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request.

Affected Platforms

Totolink Ca600-Poe FirmwareTotolink Ca600-Poe

Weakness Type

CWE-77

References