CVE-2025-0457

The airPASS from NetVision Information has an OS Command Injection vulnerability, allowing remote attackers with regular privileges to inject and execute arbitrary OS commands.

Score

CVSS 3.1 8.8 High

Status

Deferred - twcert@cert.org.tw

Published

2025-01-16

Last modified

2025-01-16

Weaknesses

CWE-78

Affected products

• Airpass (Netvision Information)

References

• https://www.twcert.org.tw/en/cp-139-8362-efb33-2.html
• https://www.twcert.org.tw/tw/cp-132-8361-ff3fb-1.html