CVE-2025-6621 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

A vulnerability classified as critical has been found in TOTOLINK CA300-PoE 6.2c.884. This affects the function QuickSetting of the file ap.so. The manipulation…
Medium CVSS: 5.3

CVE-2025-6621

A vulnerability classified as critical has been found in TOTOLINK CA300-PoE 6.2c.884. This affects the function QuickSetting of the file ap.so. The manipulation of the argument hour/minute leads to os command injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Vendor
Totolink
Product
Ca300-poe Firmware
CWE
CWE-77
Yayın Tarihi
2025-06-25 18:15:25
Güncelleme
2025-06-27 18:10:30
Source Identifier
cna@vuldb.com
KEV Date Added
-

Kategoriler

CWE-77 Ca300-poe Firmware MEDIUM Totolink 2025

Referanslar

https://github.com/wudipjq/my_vuln/blob/main/totolink4/vuln_47/47.md https://github.com/wudipjq/my_vuln/blob/main/totolink4/vuln_47/47.md#poc https://vuldb.com/?ctiid.313839 https://vuldb.com/?id.313839 https://vuldb.com/?submit.602266 https://www.totolink.net/ https://github.com/wudipjq/my_vuln/blob/main/totolink4/vuln_47/47.md https://github.com/wudipjq/my_vuln/blob/main/totolink4/vuln_47/47.md#poc