CVE-2025-27027 — Restricted shell evasion in Radiflow iSAP Smart Collector
A user with vpuser credentials that opens an SSH connection to the device, gets a restricted shell rbash that allows only a small list of allowed commands. This vulnerability en…
Published: 2025-07-09 · CVSS: 4.1 · CVSS 3.1
A user with vpuser credentials that opens an SSH connection to the device, gets a restricted shell rbash that allows only a small list of allowed commands. This vulnerability enables the user to get a full-featured Linux shell, bypassing the rbash restrictions.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7