216.73.217.24

CVE-2025-44845

· Published 01/05/2025 17:15 · Modified 01/05/2025 17:15

Labels: CVE-2025-44845 2025-05-01CVE-2025-44845[email protected]

Essential information

Published
01/05/2025 17:15
Modified
01/05/2025 17:15
Author
—
Creator
—
CISA KEV
No
CWE
—

Description

TOTOLINK CA600-PoE V5.3c.6665_B20180820 was found to contain a command injection vulnerability in the NTPSyncWithHost function via the hostTime parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request.

NVD status

Status
Received — CVE has been recently published to the CVE List and has been received by the NVD.
Source
[email protected]
NVD
View on NVD

Affected products (CPE)

ProductCPE
totolink / ca600-poe cpe:2.3:a:totolink:ca600-poe:5.3c.6665_b20180820:*:*:*:*:*:*:*

References