Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2025-3626

A remote attacker with administrator account can gain full control of the device due to improper neutralization of special elements used in an OS Command ('OS Command Injection') while uploading a config file via webUI.

Published

2025-07-07T10:15:27.967

Last Modified

2025-07-08T16:18:34.923

Status

Awaiting Analysis

Source

[email protected]

Severity

CVSSv3.1: 9.1 (CRITICAL)

Weaknesses
  • Type: Primary
    CWE-78
Affected Vendors & Products

-

References