PT-2025-26876 · Totolink · Totolink Ca300-Poe

Pjqwudi · Published 2025-06-25 · Updated 2025-06-25 · CVE-2025-6620

Positive Technologies (AI Summary)

CVSS v3.1

10

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: TOTOLINK CA300-PoE version 6.2c.884

Description: A critical issue affects the setUpgradeUboot function of the upgrade.so file, allowing os command injection through the manipulation of the FileName argument. This can be exploited remotely.

Recommendations: For TOTOLINK CA300-PoE version 6.2c.884, as a temporary workaround, consider disabling the setUpgradeUboot function until a patch is available. Restrict access to the upgrade.so file to minimize the risk of exploitation. Avoid using the FileName argument in the affected function until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

OS Command Injection

Command Injection

Weakness Enumeration

CWE-78

CWE-77

Related Identifiers

BDU:2025-10545

CVE-2025-6620

Affected Products

Totolink Ca300-Poe

References · 12

• 🔥❌ https://github.com/wudipjq/my_vuln/blob/main/totolink4/vuln_46/46.md · Exploit, Deleted
• 🔥❌ https://github.com/wudipjq/my_vuln/blob/main/totolink4/vuln_46/46.md#poc · Exploit, Deleted
• https://osv.dev/vulnerability/CVE-2025-6620 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-6620 · Security Note
• https://bdu.fstec.ru/vul/2025-10545 · Security Note
• https://t.me/cvetracker/27046 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1937964917019066649 · Twitter Post
• https://twitter.com/CVEnew/status/1937939405877993720 · Twitter Post
• https://vuldb.com/?ctiid.313838 · Note
• https://vuldb.com/?id.313838 · Note
• https://totolink.net · Note
• https://vuldb.com/?submit.602265 · Note