Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
rect credentials. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.hoteldruid.com/ - https://github.com/IvanT7D3/CVE-2025-44203/tree/main
CVE ID: CVE-2025-44206 State: PUBLISHED Published: 2025-06-25T00:00:00.000Z Last Updated: 2025-06-25T16:21:24.234Z Severity: MEDIUM (CVSS 4.6 CVSS:3.1/AC:L/AV:N/A:N/C:L/I:L/PR:L/S:U/UI:R) Vendors: n/a Products: n/a Problem Types: n/a Description: Hexagon HxGN OnCall Dispatch Advantage (Web) v10.2309.03.00264 and Hexagon HxGN OnCall Dispatch Advantage (Mobile) v10.2402 are vulnerable to Cross Site Scripting (XSS) which allows a remote authenticated attacker with access to the Broadcast (Person) functionality to execute arbitrary code. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://hexagon.com/products/hxgn-oncall-dispatch/ - https://github.com/yuxuannn/cve-details/bl
nrichment: References: - https://hexagon.com/products/hxgn-oncall-dispatch/ - https://github.com/yuxuannn/cve-details/blob/main/CVE-2025-44206.md
CVE ID: CVE-2025-44251 State: PUBLISHED Published: 2025-07-10T00:00:00.000Z Last Updated: 2025-07-15T19:56:57.979Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ecovacs Deebot T10 1.7.2 transmits Wi-Fi credentials in cleartext during the pairing process. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http://ecovacs.com - https://httpscolonforwardslashforwardslashwwwdotzoltanbalazsdotcom.com/2025/07/09/CVE-2025-44251.html
CVE ID: CVE-2025-44525 State: PUBLISHED Published: 2025-07-09T00:00:00.000Z Last Updated: 2025-07-09T19:43:56.339Z Vendors: n/a Products: n/a Problem Types: n/a Description: Texas Instruments CC2652RB LaunchPad SimpleLink CC13XX CC26XX SDK 7.41.00.17 was discovered to utilize insufficient permission checks on critical fields within Bluetooth Low Energy (BLE) data packets. This issue allows attackers to cause a Denial of Service (DoS) via a crafted LL_Length_Req packet. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http://texas.com - http://cc2652rb.com - https://github.com/yangting111/BLE_TEST/blob/main/result/PoC/TI/Length_Req_MaxRxBytes.md
CVE ID: CVE-2025-44526 State: PUBLISHED Published: 2025-07-09T00:00:00.000Z Last Updated: 2025-07-09T19:42:34.487Z Vendors: n/a Products: n/a Problem Types: n/a Description: Realtek RTL8762EKF-EVB RTL8762E SDK V1.4.0 was discovered to utilize insufficient permission checks on critical fields within Bluetooth Low Energy (BLE) data packets. This issue allows attackers to cause a Denial of Service (DoS) via a crafted LL_Length_Req packet. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http://realtek.com - http://rtl8762ekf-evb.com - https://github.com/yangting111/BLE_TEST/blob/main/result/PoC/Realtek/Improper_Validation_of_BLE_PDU_Length.md
CVE ID: CVE-2025-44528 State: PUBLISHED Published: 2025-06-23T00:00:00.000Z Last Updated: 2025-06-24T18:00:33.368Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in Texas Instruments LP-CC2652RB SimpleLink CC13XX CC26XX SDK 7.41.00.17 allows attackers to cause a Denial of Service (DoS) via sending a crafted LL_Pause_Enc_Req packet during the authentication and connection phase, causing a Denial of Service (DoS). Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http://texas.com - http://lp-cc2652rb.com - https://github.com/yangting111/BLE_TEST/blob/main/result/PoC/TI/Accept_Pause_Enc_Req.md
CVE ID: CVE-2025-44531 State: PUBLISHED Published: 2025-06-24T00:00:00.000Z Last Updated: 2025-06-24T19:15:57.370Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in Realtek RTL8762EKF-EVB RTL8762E SDK v1.4.0 allows attackers to cause a Denial of Service (DoS) via sending a crafted before a pairing public key is received during a Bluetooth connection attempt. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http://realtek.com - http://rtl8762ekf-evb.com - https://github.com/yangting111/BLE_TEST/blob/main/result/PoC/Realtek/Pairing_Random_Before_Pairing_Public_Key.md
CVE ID: CVE-2025-44557 State: PUBLISHED Published: 2025-06-27T00:00:00.000Z Last Updated: 2025-07-02T14:22:39.151Z Vendors: n/a Products: n/a Problem Types: n/a Description: A state machine transition flaw in the Bluetooth Low Energy (BLE) stack of Cypress PSoC4 v3.66 allows attackers to bypass the pairing process and authentication via a crafted pairing_failed packet. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.infineon.com/cms/en/design-support/tools/sdk/psoc-software/psoc-4-components/psoc-creator-component-datasheet-bluetooth-low-energy-ble/ - https://github.com/yangting111/BLE_TEST/blob/main/result/PoC/Cypress/Auth_bypass.md
CVE ID: CVE-2025-44559 State: PUBLISHED Published: 2025-06-27T00:00:00.000Z Last Updated: 2025-07-02T14:24:46.804Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in the Bluetooth Low Energy (BLE) stack of Realtek RTL8762E BLE SDK v1.4.0 allows attackers within Bluetooth range to cause a Denial of Service (DoS) via sending a specific sequence of crafted control packets. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http://realtek.com - http://rtl8762e.com - https://github.com/yangting111/BLE_TEST/blob/main/result/PoC/Realtek/Cross-layer_Interaction_Deadlock.md
CVE ID: CVE-2025-44593 State: PUBLISHED Published: 2025-09-09T00:00:00.000Z Last Updated: 2025-09-10T15:54:08.800Z Vendors: n/a Products: n/a Problem Types: n/a Description: Halo prior to 2.20.13 allows bypassing file type detection and uploading malicious files such as .exe and .html files. Specifically, .html files can trigger stored XSS vulnerabilities. This vulnerability is fixed in 2.20.13 Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://meadow-horn-b94.notion.site/halo-File-Upload-Vulnerability-14c42bd5b11880d58e11cd976f8e9d4f
CVE ID: CVE-2025-44594 State: PUBLISHED Published: 2025-09-09T00:00:00.000Z Last Updated: 2025-09-10T14:10:52.900Z Vendors: n/a Products: n/a Problem Types: n/a Description: halo v2.20.17 and before is vulnerable to server-side request forgery (SSRF) in /apis/uc.api.storage.halo.run/v1alpha1/attachments/-/upload-from-url. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://meadow-horn-b94.notion.site/halo-ssrf-14c42bd5b11880c09936df07f58f5bed?pvs=74
CVE ID: CVE-2025-44595 State: PUBLISHED Published: 2025-09-09T00:00:00.000Z Last Updated: 2025-09-10T14:28:40.738Z Vendors: n/a Products: n/a Problem Types: n/a Description: Halo v2.20.17 and before is vulnerable to Cross Site Scripting (XSS) in /halo_host/archives/{name}. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://meadow-horn-b94.notion.site/halo-xss-11842bd5b118808ba6f2c199a65bb42d
CVE ID: CVE-2025-44608 State: PUBLISHED Published: 2025-07-25T00:00:00.000Z Last Updated: 2025-07-25T20:13:48.909Z Vendors: n/a Products: n/a Problem Types: n/a Description: CloudClassroom-PHP Project v1.0 was discovered to contain a SQL injection vulnerability via the viewid parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http://cloudclassroom-php.com - https://github.com/mr-xmen786/CVE-2025-44608
CVE ID: CVE-2025-44612 State: PUBLISHED Published: 2025-05-30T00:00:00.000Z Last Updated: 2025-05-30T22:02:19.532Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tinxy WiFi Lock Controller v1 RF was discovered to transmit sensitive information in plaintext, including control information and device credentials, allowing attackers to possibly intercept and access sensitive information via a man-in-the-middle attack. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/ShravanSinghRathore/Tinxy/wiki/1.-WiFi-Lock-Controller-v1-RF-%281%E2%80%909%29
CVE ID: CVE-2025-44614 State: PUBLISHED Published: 2025-05-30T00:00:00.000Z Last Updated: 2025-05-30T22:02:12.898Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tinxy WiFi Lock Controller v1 RF was discovered to store users' sensitive information, including credentials and mobile phone numbers, in plaintext. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/ShravanSinghRathore/Tinxy/wiki/1.-WiFi-Lock-Controller-v1-RF-%281%E2%80%909%29
CVE ID: CVE-2025-44619 State: PUBLISHED Published: 2025-05-30T00:00:00.000Z Last Updated: 2025-05-30T22:02:07.270Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tinxy WiFi Lock Controller v1 RF was discovered to be configured to transmit on an open Wi-Fi network, allowing attackers to join the network without authentication. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http://wifi.com - http://tinxy.com
CVE ID: CVE-2025-44635 State: PUBLISHED Published: 2025-06-20T00:00:00.000Z Last Updated: 2025-06-24T15:53:02.071Z Vendors: n/a Products: n/a Problem Types: n/a Description: There are multiple unauthorized remote command execution vulnerabilities in the H3C ER2200G2, ERG2-450W, ERG2-1200W, ERG2-1350W, NR1200W series routers before ERG2AW-MNW100-R1117; H3C ER3100G2, ER3200G2, ER3260G2, ER5100G2, ER5200G2, ER6300G2, ER8300G2, ER8300G2-X series routers before ERHMG2-MNW100-R1126; GR3200, GR5200, GR8300 and other series routers before MiniGR1B0V100R018L50; GR-1800AX before MiniGRW1B0V100R009L50; GR-3000AX before SWBRW1A0V100R007L50; and GR-5400AX before SWBRW1B0V100R009L50. Attackers can bypass
GRW1B0V100R009L50; GR-3000AX before SWBRW1A0V100R007L50; and GR-5400AX before SWBRW1B0V100R009L50. Attackers can bypass authentication by including specially crafted text in the request URL or message header, and then inject arbitrary malicious commands into some fields related to ACL access control list and user group functions and execute to obtain the highest ROOT privileges of remote devices, thereby completely taking over the remote target devices. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://zhiliao.h3c.com/Theme/details/230461 - https://www.h3c.com/cn/Service/Online_Help/psirt/security-notice/detail_2021.htm?Id=459
CVE ID: CVE-2025-44643 State: PUBLISHED Published: 2025-08-04T00:00:00.000Z Last Updated: 2025-08-04T16:05:25.238Z Vendors: n/a Products: n/a Problem Types: n/a Description: Certain Draytek products are affected by Insecure Configuration. This affects AP903 v1.4.18 and AP912C v1.4.9 and AP918R v1.4.9. The setting of the password property in the ripd.conf configuration file sets a hardcoded weak password, posing a security risk. An attacker with network access could exploit this to gain unauthorized control over the routing daemon, potentially altering network routes or intercepting traffic. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http://draytek.com - https://www.noti
rcepting traffic. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http://draytek.com - https://www.notion.so/Misconfiguration-in-Draytek-AP903-23a54a1113e780aca7f2d21dbdab9db8
CVE ID: CVE-2025-44647 State: PUBLISHED Published: 2025-07-21T00:00:00.000Z Last Updated: 2025-08-07T13:38:21.753Z Vendors: n/a Products: n/a Problem Types: n/a Description: In TRENDnet TEW-WLC100P 2.03b03, the i_dont_care_about_security_and_use_aggressive_mode_psk option is enabled in the strongSwan configuration file, so that IKE Responders are allowed to use IKEv1 Aggressive Mode with Pre-Shared Keys to conduct offline attacks on the openly transmitted hash of the PSK. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http://tew-wlc100p.com - https://gist.github.com/TPCchecker/18c32439ed13feaed99f8229d1749892 - https://www.notion.so/CVE-2025-44647-24754a1113e780b0a130d44398
github.com/TPCchecker/18c32439ed13feaed99f8229d1749892 - https://www.notion.so/CVE-2025-44647-24754a1113e780b0a130d4439861bf3c
CVE ID: CVE-2025-44649 State: PUBLISHED Published: 2025-07-21T00:00:00.000Z Last Updated: 2025-08-07T13:42:25.845Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the configuration file of racoon in the TRENDnet TEW-WLC100P 2.03b03, the first item of exchage_mode is set to aggressive. Aggressive mode in IKE Phase 1 exposes identity information in plaintext, is vulnerable to offline dictionary attacks, and lacks flexibility in negotiating security parameters. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http://tew-wlc100p.com - https://gist.github.com/TPCchecker/6d787c4916891f493b274b70abfad860 - https://www.notion.so/CVE-2025-44649-24754a1113e780a4a1d1c4cd6d
github.com/TPCchecker/6d787c4916891f493b274b70abfad860 - https://www.notion.so/CVE-2025-44649-24754a1113e780a4a1d1c4cd6d3ff345
CVE ID: CVE-2025-44650 State: PUBLISHED Published: 2025-07-21T00:00:00.000Z Last Updated: 2025-08-07T13:29:43.759Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Netgear R7000 V1.3.1.64_10.1.36 and EAX80 V1.0.1.70_1.0.2, the USERLIMIT_GLOBAL option is set to 0 in the bftpd.conf configuration file. This can cause DoS attacks when unlimited users are connected. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.netgear.com/about/security/ - https://gist.github.com/TPCchecker/d13d15dfa8965ba88a9437718f77f67d - https://www.notion.so/CVE-2025-44650-24754a1113e780dca89dca218b90b1d9
CVE ID: CVE-2025-44651 State: PUBLISHED Published: 2025-07-21T00:00:00.000Z Last Updated: 2025-08-07T13:35:19.916Z Vendors: n/a Products: n/a Problem Types: n/a Description: In TRENDnet TPL-430AP FW1.0, the USERLIMIT_GLOBAL option is set to 0 in the bftpd-related configuration file. This can cause DoS attacks when unlimited users are connected. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http://trendnet.com - https://gist.github.com/TPCchecker/9e27534ec59babcd4fd44d18fe7a56b3 - https://www.notion.so/CVE-2025-44651-24754a1113e780da990eec3961100ae0
CVE ID: CVE-2025-44652 State: PUBLISHED Published: 2025-07-21T00:00:00.000Z Last Updated: 2025-08-07T13:32:29.448Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Netgear RAX30 V1.0.10.94_3, the USERLIMIT_GLOBAL option is set to 0 in multiple bftpd-related configuration files. This can cause DoS attacks when unlimited users are connected. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.netgear.com/about/security/ - https://gist.github.com/TPCchecker/cb4549b7689727efeb24de0802c0fde3 - https://www.notion.so/CVE-2025-44652-24754a1113e78003909afbd6f7fd707b
CVE ID: CVE-2025-44653 State: PUBLISHED Published: 2025-07-21T00:00:00.000Z Last Updated: 2025-08-07T13:40:46.127Z Vendors: n/a Products: n/a Problem Types: n/a Description: In H3C GR2200 MiniGR1A0V100R016, the USERLIMIT_GLOBAL option is set to 0 in the /etc/bftpd.conf. This can cause DoS attacks when unlimited users are connected. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http://h3c.com - https://gist.github.com/TPCchecker/1193f51fc870b597c8a59860199d50e4 - https://www.notion.so/CVE-2025-44653-24754a1113e780fab128c2c5752f5703
CVE ID: CVE-2025-44654 State: PUBLISHED Published: 2025-07-21T00:00:00.000Z Last Updated: 2025-07-22T13:47:49.717Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Linksys E2500 3.0.04.002, the chroot_local_user option is enabled in the vsftpd configuration file. This could lead to unauthorized access to system files, privilege escalation, or use of the compromised server as a pivot point for internal network attacks. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http://e2500.com - https://gist.github.com/TPCchecker/279708bf9c599c836ea66f3a3e0c25e1
CVE ID: CVE-2025-44655 State: PUBLISHED Published: 2025-07-21T00:00:00.000Z Last Updated: 2025-07-22T19:07:24.310Z Vendors: n/a Products: n/a Problem Types: n/a Description: In TOTOLink A7100RU V7.4, A950RG V5.9, and T10 V5.9, the chroot_local_user option is enabled in the vsftpd.conf. This could lead to unauthorized access to system files, privilege escalation, or use of the compromised server as a pivot point for internal network attacks. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http://totolink.com - https://gist.github.com/TPCchecker/d7306649f51ca25e22dd6532546a58f3
CVE ID: CVE-2025-44657 State: PUBLISHED Published: 2025-07-21T00:00:00.000Z Last Updated: 2025-07-22T15:37:55.816Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Linksys EA6350 V2.1.2, the chroot_local_user option is enabled in the dynamically generated vsftpd configuration file. This could lead to unauthorized access to system files, privilege escalation, or use of the compromised server as a pivot point for internal network attacks. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http://ea6350.com - https://gist.github.com/TPCchecker/7839fbd329ebd2f9f6b105c4926d4b0c
CVE ID: CVE-2025-44658 State: PUBLISHED Published: 2025-07-21T00:00:00.000Z Last Updated: 2025-08-07T13:43:33.448Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Netgear RAX30 V1.0.10.94, a PHP-FPM misconfiguration vulnerability is caused by not following the specification to only limit FPM to .php extensions. An attacker may exploit this by uploading malicious scripts disguised with alternate extensions and tricking the web server into executing them as PHP, bypassing security mechanisms based on file extension filtering. This may lead to remote code execution (RCE), information disclosure, or full system compromise. Additional Analyst Notes: - CISA ADP Vulnrichment: Referenc
on (RCE), information disclosure, or full system compromise. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.netgear.com/about/security/ - https://gist.github.com/TPCchecker/c72eea7a3f89070dab7dfdbf7504b2d6 - https://www.notion.so/CVE-2025-44658-24754a1113e780df8f72c779a108f75b
CVE ID: CVE-2025-44779 State: PUBLISHED Published: 2025-08-07T00:00:00.000Z Last Updated: 2025-08-07T15:39:59.452Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in Ollama v0.1.33 allows attackers to delete arbitrary files via sending a crafted packet to the endpoint /api/pull. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/ollama/ollama - https://a1batr0ss.top/2025/03/17/Ollama-arbitrary-file-deletion-vulnerability/ - https://a1batr0ss.top/2025/08/06/CVE-2025-44779-Ollama-arbitrary-file-deletion/
CVE ID: CVE-2025-44823 State: PUBLISHED Published: 2025-10-07T00:00:00.000Z Last Updated: 2025-10-07T20:45:38.583Z Severity: CRITICAL (CVSS 9.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: Nagios Products: Log Server Problem Types: CWE-497 Description: Nagios Log Server before 2024R1.3.2 allows authenticated users to retrieve cleartext administrative API keys via a /nagioslogserver/index.php/api/system/get_users call. This is GL:NLS#475. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.nagios.com/changelog/#log-server - https://www.exploit-db.com/exploits/52177
CVE ID: CVE-2025-44824 State: PUBLISHED Published: 2025-10-07T00:00:00.000Z Last Updated: 2025-10-08T17:23:59.563Z Severity: HIGH (CVSS 8.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:H) Vendors: Nagios Products: Log Server Problem Types: CWE-863 Description: Nagios Log Server before 2024R1.3.2 allows authenticated users (with read-only API access) to stop the Elasticsearch service via a /nagioslogserver/index.php/api/system/stop?subsystem=elasticsearch call. The service stops even though "message": "Could not stop elasticsearch" is in the API response. This is GL:NLS#474. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.nagios.com/changelog/#log-server - https://g
dditional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.nagios.com/changelog/#log-server - https://github.com/skraft9/nagios-log-server-dos
CVE ID: CVE-2025-44830 State: PUBLISHED Published: 2025-05-12T00:00:00.000Z Last Updated: 2025-05-12T22:07:13.247Z Vendors: n/a Products: n/a Problem Types: n/a Description: EngineerCMS v1.02 through v.2.0.5 has a SQL injection vulnerability in the /project/addprojtemplet interface. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/3xxx/engineercms/issues/90 - https://gist.github.com/LTLTLXEY/e00ec21b730742ef432a7a560cd9b70a
CVE ID: CVE-2025-44831 State: PUBLISHED Published: 2025-05-13T00:00:00.000Z Last Updated: 2025-05-14T14:11:26.082Z Vendors: n/a Products: n/a Problem Types: n/a Description: EngineerCMS v1.02 through v2.0.5 has a SQL injection vulnerability in the /project/addproject interface. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/3xxx/engineercms/issues/91
CVE ID: CVE-2025-44835 State: PUBLISHED Published: 2025-05-01T00:00:00.000Z Last Updated: 2025-05-01T20:36:23.983Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link DIR-816 A2V1.1.0B05 was found to contain a command injection in iptablesWebsFilterRun, which allows remote attackers to execute arbitrary commands via shell. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/n0wstr/IOTVuln/tree/main/DIR-816/IptablesWebsFilterRun
CVE ID: CVE-2025-44836 State: PUBLISHED Published: 2025-05-01T00:00:00.000Z Last Updated: 2025-05-01T20:32:00.261Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK CPE CP900 V6.3c.1144_B20190715 was discovered to contain a command injection vulnerability in the setApRebootScheCfg function via the hour or minute parameters. This vulnerability allows attackers to execute arbitrary commands via a crafted request. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/n0wstr/IOTVuln/tree/main/CP900/setApRebootScheCfg
CVE ID: CVE-2025-44837 State: PUBLISHED Published: 2025-05-01T00:00:00.000Z Last Updated: 2025-05-01T20:34:44.689Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK CPE CP900 V6.3c.1144_B20190715 was discovered to contain a command injection vulnerability in the CloudSrvUserdataVersionCheck function via the url or magicid parameters. This vulnerability allows attackers to execute arbitrary commands via a crafted request. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/n0wstr/IOTVuln/tree/main/CP900/CloudSrvUserdataVersionCheck
CVE ID: CVE-2025-44838 State: PUBLISHED Published: 2025-05-01T00:00:00.000Z Last Updated: 2025-05-01T20:33:19.508Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK CPE CP900 V6.3c.1144_B20190715 was discovered to contain a command injection vulnerability in the setUploadUserData function via the FileName parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/n0wstr/IOTVuln/tree/main/CP900/setUploadUserData
CVE ID: CVE-2025-44839 State: PUBLISHED Published: 2025-05-01T00:00:00.000Z Last Updated: 2025-05-02T15:34:29.038Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK CA600-PoE V5.3c.6665_B20180820 was found to contain a command injection vulnerability in the CloudSrvUserdataVersionCheck function via the magicid parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Summermu/VulnForIoT/tree/main/Totolink_CA600-PoE/CloudSrvUserdataVersionCheck_magicid/readme.md
CVE ID: CVE-2025-44840 State: PUBLISHED Published: 2025-05-01T00:00:00.000Z Last Updated: 2025-05-02T15:33:10.896Z Vendors: n/a Products: n/a Problem Types: n/a Description: TOTOLINK CA600-PoE V5.3c.6665_B20180820 was found to contain a command injection vulnerability in the CloudSrvUserdataVersionCheck function via the svn parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Summermu/VulnForIoT/tree/main/Totolink_CA600-PoE/CloudSrvUserdataVersionCheck_svn/readme.md