← Database

CVE-2025-44854

MEDIUM CVSS: 6.3 Published: 2025-05-01 Modified: 2026-06-17

Description

TOTOLINK CP900 V6.3c.1144_B20190715 was found to contain a command injection vulnerability in the setUpgradeUboot function via the FileName parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request.

Affected Platforms

Totolink Cp900Totolink Cp900 Firmware

Weakness Type

CWE-77

References