9.8

CVE-2025-26063

Exploit
An issue in Intelbras RX1500 v2.2.9 and RX3000 v1.0.11 allows unauthenticated attackers to execute arbitrary code via injecting a crafted payload into the ESSID name when creating a network.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Intelbras ≫ Rx 1500 Firmware Version2.2.9
   Intelbras ≫ Rx 1500 Version-
Intelbras ≫ Rx 3000 Firmware Version1.0.11
   Intelbras ≫ Rx 3000 Version-
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.16% 0.629
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
134c704f-9b21-4f2e-91b3-4a467353bcc0 9.8 3.9 5.9
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CWE-77 Improper Neutralization of Special Elements used in a Command ('Command Injection')

The product constructs all or part of a command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended command when it is sent to a downstream component.

https://manuais.intelbras.com.br/manual-linha-rx/ChangeLogRX1500.html
Release Notes
https://manuais.intelbras.com.br/manual-linha-rx/ChangeLogRX3000.html
Release Notes
https://seclists.org/fulldisclosure/2025/Jul/14
Third Party Advisory
Exploit
Mailing List
http://seclists.org/fulldisclosure/2025/Jul/14
http://seclists.org/fulldisclosure/2025/Jul/26