CVE-2025-13798mediumCWE-74CWE-77

CVE-2025-13798: fallo de gravedad media en ADSLR NBR1005GPEV2

ADSLR NBR1005GPEV2 send_order.cgi ap_macfilter_add command injection

Publicada el

Seguir esta CVE+ Monitorear NBR1005GPEV2

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

13Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackcvss 5.3epss 7.1%
A flaw has been found in ADSLR NBR1005GPEV2 250814-r037c. This affects the function ap_macfilter_add of the file /send_order.cgi. Executing manipulation of the argument mac can lead to command injection. The attack may be performed from remote. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
Productos afectados
ADSLR · NBR1005GPEV2
CVEs relacionadas — ADSLR NBR1005GPEV2

En el mismo producto, de las más peligrosas a las menos.

CVE-2025-13800MEDIUMADSLR NBR1005GPEV2 send_order.cgi set_mesh_disconnect command injectionEPSS 9.5%CVE-2025-13799MEDIUMADSLR NBR1005GPEV2 send_order.cgi ap_macfilter_del command injectionEPSS 9.5%