CVE-2025-8890 — Authenticated RCE in SDMC NE6037 router
Firmware in SDMC NE6037 routers prior to version 7.1.12.2.44 has a network diagnostics tool vulnerable to a shell command injection attacks. In order to exploit this vulnerabili…
Published: 2025-11-27 · CVSS: 9.3 · CVSS 4.0
Firmware in SDMC NE6037 routers prior to version 7.1.12.2.44 has a network diagnostics tool vulnerable to a shell command injection attacks. In order to exploit this vulnerability, an attacker has to log in to the router's administrative portal, which by default is reachable only via LAN ports.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7