CVE-2025-13800mediumCWE-74CWE-77

CVE-2025-13800: fallo de gravedad media en ADSLR NBR1005GPEV2

ADSLR NBR1005GPEV2 send_order.cgi set_mesh_disconnect command injection

Publicada el

Seguir esta CVE+ Monitorear NBR1005GPEV2

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

13Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackcvss 5.3epss 9.5%
A vulnerability was found in ADSLR NBR1005GPEV2 250814-r037c. This issue affects the function set_mesh_disconnect of the file /send_order.cgi. The manipulation of the argument mac results in command injection. It is possible to launch the attack remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
Productos afectados
ADSLR · NBR1005GPEV2
CVEs relacionadas — ADSLR NBR1005GPEV2

En el mismo producto, de las más peligrosas a las menos.

CVE-2025-13799MEDIUMADSLR NBR1005GPEV2 send_order.cgi ap_macfilter_del command injectionEPSS 9.5%CVE-2025-13798MEDIUMADSLR NBR1005GPEV2 send_order.cgi ap_macfilter_add command injectionEPSS 7.1%