PatchTheCVE: ca600-poe firmwarehttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2025-44848: TOTOLINK CA600-PoE V5.3c.6665_B20180820 was found to contain a command injection vulnerability in the msg_prochttps://patchthecve.com/cve/CVE-2025-44848.htmlhttps://patchthecve.com/cve/CVE-2025-44848.htmlWed, 17 Jun 2026 09:25:11 +0000MEDIUM 6.5: TOTOLINK CA600-PoE V5.3c.6665_B20180820 was found to contain a command injection vulnerability in the msg_process function via the Url parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request.CVE-2025-44847: TOTOLINK CA600-PoE V5.3c.6665_B20180820 was found to contain a command injection vulnerability in the setWebWlhttps://patchthecve.com/cve/CVE-2025-44847.htmlhttps://patchthecve.com/cve/CVE-2025-44847.htmlWed, 17 Jun 2026 09:25:11 +0000MEDIUM 6.3: TOTOLINK CA600-PoE V5.3c.6665_B20180820 was found to contain a command injection vulnerability in the setWebWlanIdx function via the webWlanIdx parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request.CVE-2025-44846: TOTOLINK CA600-PoE V5.3c.6665_B20180820 was found to contain a command injection vulnerability in the recvUpgrhttps://patchthecve.com/cve/CVE-2025-44846.htmlhttps://patchthecve.com/cve/CVE-2025-44846.htmlWed, 17 Jun 2026 09:25:11 +0000MEDIUM 6.3: TOTOLINK CA600-PoE V5.3c.6665_B20180820 was found to contain a command injection vulnerability in the recvUpgradeNewFw function via the fwUrl parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request.CVE-2025-44845: TOTOLINK CA600-PoE V5.3c.6665_B20180820 was found to contain a command injection vulnerability in the NTPSyncWhttps://patchthecve.com/cve/CVE-2025-44845.htmlhttps://patchthecve.com/cve/CVE-2025-44845.htmlWed, 17 Jun 2026 09:25:11 +0000MEDIUM 6.5: TOTOLINK CA600-PoE V5.3c.6665_B20180820 was found to contain a command injection vulnerability in the NTPSyncWithHost function via the hostTime parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request.CVE-2025-44844: TOTOLINK CA600-PoE V5.3c.6665_B20180820 was found to contain a command injection vulnerability in the setUpgrahttps://patchthecve.com/cve/CVE-2025-44844.htmlhttps://patchthecve.com/cve/CVE-2025-44844.htmlWed, 17 Jun 2026 09:25:10 +0000MEDIUM 6.5: TOTOLINK CA600-PoE V5.3c.6665_B20180820 was found to contain a command injection vulnerability in the setUpgradeFW function via the FileName parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request.CVE-2025-44843: TOTOLINK CA600-PoE V5.3c.6665_B20180820 was found to contain a command injection vulnerability in the CloudSrvhttps://patchthecve.com/cve/CVE-2025-44843.htmlhttps://patchthecve.com/cve/CVE-2025-44843.htmlWed, 17 Jun 2026 09:25:10 +0000MEDIUM 6.5: TOTOLINK CA600-PoE V5.3c.6665_B20180820 was found to contain a command injection vulnerability in the CloudSrvUserdataVersionCheck function via the url parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request.CVE-2025-44842: TOTOLINK CA600-PoE V5.3c.6665_B20180820 was found to contain a command injection vulnerability in the msg_prochttps://patchthecve.com/cve/CVE-2025-44842.htmlhttps://patchthecve.com/cve/CVE-2025-44842.htmlWed, 17 Jun 2026 09:25:10 +0000MEDIUM 6.5: TOTOLINK CA600-PoE V5.3c.6665_B20180820 was found to contain a command injection vulnerability in the msg_process function via the Port parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request.CVE-2025-44841: TOTOLINK CA600-PoE V5.3c.6665_B20180820 was found to contain a command injection vulnerability in the CloudSrvhttps://patchthecve.com/cve/CVE-2025-44841.htmlhttps://patchthecve.com/cve/CVE-2025-44841.htmlWed, 17 Jun 2026 09:25:10 +0000MEDIUM 6.5: TOTOLINK CA600-PoE V5.3c.6665_B20180820 was found to contain a command injection vulnerability in the CloudSrvUserdataVersionCheck function via the version parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request.CVE-2025-44840: TOTOLINK CA600-PoE V5.3c.6665_B20180820 was found to contain a command injection vulnerability in the CloudSrvhttps://patchthecve.com/cve/CVE-2025-44840.htmlhttps://patchthecve.com/cve/CVE-2025-44840.htmlWed, 17 Jun 2026 09:25:10 +0000MEDIUM 6.5: TOTOLINK CA600-PoE V5.3c.6665_B20180820 was found to contain a command injection vulnerability in the CloudSrvUserdataVersionCheck function via the svn parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request.CVE-2025-44839: TOTOLINK CA600-PoE V5.3c.6665_B20180820 was found to contain a command injection vulnerability in the CloudSrvhttps://patchthecve.com/cve/CVE-2025-44839.htmlhttps://patchthecve.com/cve/CVE-2025-44839.htmlWed, 17 Jun 2026 09:25:10 +0000MEDIUM 6.5: TOTOLINK CA600-PoE V5.3c.6665_B20180820 was found to contain a command injection vulnerability in the CloudSrvUserdataVersionCheck function via the magicid parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request.