Vulnerabilities > Totolink > Ca300 POE Firmware > Critical

DATE CVE VULNERABILITY TITLE RISK
2023-02-03 CVE-2023-24141 Command Injection vulnerability in Totolink Ca300-Poe Firmware 6.2C.884
TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the NetDiagPingTimeOut parameter in the setNetworkDiag function.
network
low complexity
totolink CWE-77
critical
9.8
2023-02-03 CVE-2023-24140 Command Injection vulnerability in Totolink Ca300-Poe Firmware 6.2C.884
TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the NetDiagPingNum parameter in the setNetworkDiag function.
network
low complexity
totolink CWE-77
critical
9.8
2023-02-03 CVE-2023-24139 Command Injection vulnerability in Totolink Ca300-Poe Firmware 6.2C.884
TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the NetDiagHost parameter in the setNetworkDiag function.
network
low complexity
totolink CWE-77
critical
9.8
2023-02-03 CVE-2023-24138 Command Injection vulnerability in Totolink Ca300-Poe Firmware 6.2C.884
TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the host_time parameter in the NTPSyncWithHost function.
network
low complexity
totolink CWE-77
critical
9.8