Vulnerabilities > Totolink > Ca300 POE Firmware > Critical

DATE CVE VULNERABILITY TITLE RISK
2023-02-14 CVE-2023-24161 Command Injection vulnerability in Totolink Ca300-Poe Firmware 6.2C.884
TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the webWlanIdx parameter in the setWebWlanIdx function.
network
low complexity
totolink CWE-77
critical
9.8
2023-02-14 CVE-2023-24160 Command Injection vulnerability in Totolink Ca300-Poe Firmware 6.2C.884
TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the admuser parameter in the setPasswordCfg function.
network
low complexity
totolink CWE-77
critical
9.8
2023-02-14 CVE-2023-24159 Command Injection vulnerability in Totolink Ca300-Poe Firmware 6.2C.884
TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the admpass parameter in the setPasswordCfg function.
network
low complexity
totolink CWE-77
critical
9.8
2023-02-03 CVE-2023-24149 Use of Hard-coded Credentials vulnerability in Totolink Ca300-Poe Firmware 6.2C.884
TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a hard code password for root which is stored in the component /etc/shadow.
network
low complexity
totolink CWE-798
critical
9.8
2023-02-03 CVE-2023-24148 Command Injection vulnerability in Totolink Ca300-Poe Firmware 6.2C.884
TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the FileName parameter in the setUploadUserData function.
network
low complexity
totolink CWE-77
critical
9.8
2023-02-03 CVE-2023-24146 Command Injection vulnerability in Totolink Ca300-Poe Firmware 6.2C.884
TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the minute parameter in the setRebootScheCfg function.
network
low complexity
totolink CWE-77
critical
9.8
2023-02-03 CVE-2023-24145 Command Injection vulnerability in Totolink Ca300-Poe Firmware 6.2C.884
TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the plugin_version parameter in the setUnloadUserData function.
network
low complexity
totolink CWE-77
critical
9.8
2023-02-03 CVE-2023-24144 Command Injection vulnerability in Totolink Ca300-Poe Firmware 6.2C.884
TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the hour parameter in the setRebootScheCfg function.
network
low complexity
totolink CWE-77
critical
9.8
2023-02-03 CVE-2023-24143 Command Injection vulnerability in Totolink Ca300-Poe Firmware 6.2C.884
TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the NetDiagTracertHop parameter in the setNetworkDiag function.
network
low complexity
totolink CWE-77
critical
9.8
2023-02-03 CVE-2023-24142 Command Injection vulnerability in Totolink Ca300-Poe Firmware 6.2C.884
TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the NetDiagPingSize parameter in the setNetworkDiag function.
network
low complexity
totolink CWE-77
critical
9.8