CVE-2025-25270 — Remote Code Execution via Unauthenticated Configuration Manipulation

An unauthenticated remote attacker can alter the device configuration in a way to get remote code execution as root with specific configurations.

Published: 2025-07-08 · CVSS: 9.8 · CVSS 3.1

An unauthenticated remote attacker can alter the device configuration in a way to get remote code execution as root with specific configurations.

Original CVE JSON · STIX 2.1

Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7