CVE-2025-44838 in CPE CP900info

Zusammenfassung

von MITRE • 01.05.2025

TOTOLINK CPE CP900 V6.3c.1144_B20190715 was discovered to contain a command injection vulnerability in the setUploadUserData function via the FileName parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

Zuständig

MITRE

Reservieren

22.04.2025

Veröffentlichung

01.05.2025

Moderieren

akzeptiert

Eintrag

VDB-307082

CPE

bereit

CWE

CWE-77 (bestätigt)

CVSS

6.3 (VulDB)

EPSS

0.00884

KEV

nein

Aktivitäten

very low

Quellen

MITRE	https://www.cve.org/CVERecord?id=CVE-2025-44838
NVD	https://nvd.nist.gov/vuln/detail/CVE-2025-44838
CVE Details	https://www.cvedetails.com/cve/CVE-2025-44838/

◂ Zurück Übersicht Weiter ▸

Might our Artificial Intelligence support you?

Check our Alexa App!