CVE-2025-44838 | TOTOLINK CPE CP900 6.3c.1144 setUploadUserData FileName command injection

A vulnerability, which was classified as critical, has been found in TOTOLINK CPE CP900 6.3c.1144. Affected by this issue is the function setUploadUserData. The manipulation of the argument FileName leads to command injection.

This vulnerability is handled as CVE-2025-44838. The attack may be launched remotely. There is no exploit available.