CVE-2025-54322 in SXZOS

الملخص

بحسب MITRE • 27/12/2025

Xspeeder SXZOS through 2025-12-26 allows root remote code execution via base64-encoded Python code in the chkid parameter to vLogin.py. The title and oIP parameters are also used.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

• مسؤول: MITRE
• حجز: 20/07/2025
• إفشاء: 27/12/2025
• الاعتدال: تمت الموافقة
• إدخال: VDB-338530
• CPE: جاهز
• CWE: CWE-95 (مؤكد)
• CVSS: 9.8 (NVD)
• EPSS: 0.14228
• KEV: لا
• النشاطات: منخفض جدًا

المصادر

• MITRE: https://www.cve.org/CVERecord?id=CVE-2025-54322
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2025-54322
• CVE Details: https://www.cvedetails.com/cve/CVE-2025-54322/