CVE-2025-67447 in NW-431Finfo

Summary

by MITRE • 06/04/2026

The network diagnosis (ping) module in Neterbit NW-431F Router 20241014-IR03 and before is vulnerable to OS command injection. The application does not properly sanitize user input in the IP address field before passing it to the system's ping command. An attacker can inject arbitrary OS commands, which will be executed with the privileges of the web server.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Responsible

MITRE

Reservation

12/08/2025

Disclosure

06/04/2026

Moderation

accepted

CPE

ready

EPSS

0.00000

KEV

no

Activities

low

Sources

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!