CVE-2025-0415 — Command Injection in NTP Setting
A remote attacker with web administrator privileges can exploit the device’s web interface to execute arbitrary system commands through the NTP settings. Successful exploitation…
Published: 2025-04-02 · CVSS: 9.2 · CVSS 4.0
A remote attacker with web administrator privileges can exploit the device’s web interface to execute arbitrary system commands through the NTP settings. Successful exploitation may result in the device entering an infinite reboot loop, leading to a total or partial denial of connectivity for downstream systems that rely on its network services.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7