CVE-2025-54403
Multiple OS command injection vulnerabilities exist in the swctrl functionality of Planet WGR-500 v1.3411b190912. A specially crafted network request can lead to arbitrary command execution. An attacker can send a network request to trigger these vulnerabilities.This command injection is related to the `new_password` request parameter.
Vendor
Product
CWE
Yayın Tarihi
2025-10-07 14:15:38
Güncelleme
2025-11-03 18:16:59
Source Identifier
talos-cna@cisco.com
KEV Date Added
-