CVE-2025-9583 in CF-N1

Résumé

par MITRE • 28/08/2025

A vulnerability has been found in Comfast CF-N1 2.6.0. Affected by this vulnerability is the function ping_config of the file /usr/bin/webmgnt. The manipulation leads to command injection. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and may be used.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• Responsable: VulDB
• Divulgation: 28/08/2025
• Modérer: accepté
• Entrée: VDB-321696
• CPE: prêt
• CWE: CWE-77 (confirmé)
• Exploitation: Télécharger
• CVSS: 8.8 (NVD)
• EPSS: 0.05075
• KEV: non
• Activités: très faible

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2025-9583
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2025-9583
• CVE Details: https://www.cvedetails.com/cve/CVE-2025-9583/