Skip to content

Totolink Cp900 vulnerabilities

totolink cp900 firmwareTotolink CP900 V6.3c.1144_B20190715 was found to contain a command injection vulnerability in the...CVE-2025-448546.3 MediumMay 1, 2025
totolink cp900 firmwareTOTOLINK CPE CP900 V6.3c.1144_B20190715 was discovered to contain a command injection...CVE-2025-448386.3 MediumMay 1, 2025
totolink cp900 firmwareTOTOLINK CPE CP900 V6.3c.1144_B20190715 was discovered to contain a command injection...CVE-2025-448376.3 MediumMay 1, 2025
totolink cp900 firmwareTOTOLINK CPE CP900 V6.3c.1144_B20190715 was discovered to contain a command injection...CVE-2025-448366.3 MediumMay 1, 2025
totolink cp900, cp900 firmware +1 moreTOTOLINK CP900 Telnet Service setTelnetCfg command injectionCVE-2024-7464EPSS 19.9%5.3 MediumAugust 5, 2024
totolink cp900, cp900 firmware +1 moreTOTOLINK CP900 cstecgi.cgi UploadCustomModule buffer overflowCVE-2024-7463EPSS 11.0%8.7 HighAugust 5, 2024
totolink cp900l firmwareTOTOLINK CP900L v4.1.5cu.798_B20221228 was discovered to contain a command injection vulnerability via the FileName parameter in the UploadFirmwareFile function.CVE-2024-354015.9 MediumMay 28, 2024
totolink cp900 l, cp900l firmware +1 moreTOTOLINK CP900L v4.1.5cu.798_B20221228 was discovered to contain a stack overflow via the desc parameter in the function setIpPortFilterRulesCVE-2024-354032.7 LowMay 28, 2024
totolink cp900l firmwareTOTOLINK CP900L v4.1.5cu.798_B20221228 was discovered to contain a stack overflow via the desc parameter in the function SetPortForwardRulesCVE-2024-354005.3 MediumMay 28, 2024
totolink cp900l firmwareTOTOLINK CP900L v4.1.5cu.798_B20221228 was discovered to contain a stack overflow via the password parameter in the function loginAuthCVE-2024-353998.8 HighMay 28, 2024
totolink cp900 l, cp900l firmware +1 moreTOTOLINK CP900L v4.1.5cu.798_B20221228 was discovered to contain a stack overflow via the desc parameter in the function setMacFilterRules.CVE-2024-353989.8 CriticalMay 28, 2024
totolink cp900l firmwareTOTOLINK CP900L v4.1.5cu.798_B20221228 weas discovered to contain a command injection vulnerability in the NTPSyncWithHost function via the hostTime parameter. This vulnerability allows attackers to e…CVE-2024-35397EPSS 15.1%8.8 HighMay 28, 2024
totolink cp900 l, cp900l firmware +1 moreTOTOLINK CP900L v4.1.5cu.798_B20221228 was discovered to contain a hardcoded password vulnerability in /etc/shadow.sample, which allows attackers to log in as root.CVE-2024-353958.8 HighMay 24, 2024
totolink cp900, cp900l firmware +1 moreTOTOLINK CP900L v4.1.5cu.798_B20221228 was discovered to contain a hardcoded password for telnet in /web_cste/cgi-bin/product.ini, which allows attackers to log in as root.CVE-2024-353969.8 CriticalMay 24, 2024
totolink cp900 firmwareTOTOLink outdoor CPE CP900 V6.3c.566_B20171026 is discovered to contain a command injection...CVE-2022-284959.8 CriticalMarch 24, 2023
totolink cp900 firmwareTOTOLink outdoor CPE CP900 V6.3c.566_B20171026 is discovered to contain a command injection...CVE-2022-284979.8 CriticalMarch 23, 2023
totolink cp900 firmwareTOTOLink outdoor CPE CP900 V6.3c.566_B20171026 discovered to contain a command injection...CVE-2022-284969.8 CriticalMarch 23, 2023
totolink cp900 firmwareTOTOLink outdoor CPE CP900 V6.3c.566_B20171026 is discovered to contain a command injection...CVE-2022-284949.8 CriticalMarch 23, 2023
totolink cp900 firmwareA vulnerability in TOTOLINK CP900 V6.3c.566 allows attackers to start the Telnet service,CVE-2022-284939.8 CriticalMarch 23, 2023
totolink cp900 firmwareTOTOLINK Technology CPE with firmware V6.3c.566 ,allows remote attackers to bypass Login.CVE-2022-284929.8 CriticalMarch 23, 2023
totolink cp900 firmwareTOTOLink outdoor CPE CP900 V6.3c.566_B20171026 contains a command injection vulnerability in the...CVE-2022-284919.8 CriticalMarch 23, 2023