← Database

CVE-2025-44841

MEDIUM CVSS: 6.5 Published: 2025-05-01 Modified: 2026-06-17

Description

TOTOLINK CA600-PoE V5.3c.6665_B20180820 was found to contain a command injection vulnerability in the CloudSrvUserdataVersionCheck function via the version parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request.

Affected Platforms

Totolink Ca600-Poe FirmwareTotolink Ca600-Poe

Weakness Type

CWE-77

References