CVE-2025-71284

Katalog CVE

CVSS 9.8 · Critical EPSS 5,7%

Kerentanan Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') pada synway smg gateway management software. Skor CVSS 3.1 9.8 (Critical) menurut vulncheck.com.

Deskripsi (NVD)

Synway SMG Gateway Management Software contains an OS command injection vulnerability in the RADIUS configuration endpoint at /en/9-2radius.php where the radius_address POST parameter is split and interpolated directly into a sed command without sanitization. An unauthenticated remote attacker can inject arbitrary shell commands by submitting a POST request with crafted radius_address, radius_address2, shared_secret2, source_ip, timeout, or retry parameters along with save=1 and enable_radius=1 to achieve remote code execution. Exploitation evidence was first observed by the Shadowserver Foundation on 2025-07-11 (UTC).

Rincian

Terbit di NVD

30 April 2026

Terakhir diubah

7 Oktober 2026

Status NVD

Analyzed

CVSS 3.1

9.8 (Critical), sumber vulncheck.com
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

EPSS (30 hari)

5,7% peluang dieksploitasi; lebih tinggi dari 92,8% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/projectdiscovery/nuclei-templates/blob/main/http/vulnerabilities/synway/synwaysmg-radius-rc... advisory pihak ketiga
• https://mp.weixin.qq.com/s/PyepoFSuQ63E3RnpQa9nsA exploit · advisory pihak ketiga
• https://mrxn.net/jswz/synway-9-2radius-rce.html exploit · advisory pihak ketiga
• https://www.vulncheck.com/advisories/synway-smg-gateway-management-software-os-command-injection-via-radius-ad... advisory pihak ketiga
• https://www.synway.net/ product