CVE-2025-1448mediumobserved exploitationCWE-74CWE-77

CVE-2025-1448: medium-severity vulnerability in Synway SMG Gateway Management Software

Synway SMG Gateway Management Software 9-12ping.php command injection

Published

Follow this CVE+ Monitor SMG Gateway Management

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

35Vexday Risk Score

Prioritize patching. It exploitation observed by VulnCheck.

ssvc Attendcvss 6.9epss 2.7%
from disclosure to weapon
Published on NVDFeb 19
VulnCheck+453d
A vulnerability was found in Synway SMG Gateway Management Software up to 20250204. It has been rated as critical. This issue affects some unknown processing of the file 9-12ping.php. The manipulation of the argument retry leads to command injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N
Affected products
Synway · SMG Gateway Management Software