CVE-2025-36529 in XRN-410SN

Riassunto

di MITRE • 27/06/2025

An OS command injection issue exists in multiple versions of TB-eye network recorders and AHD recorders. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who is logging in to the device.

Once again VulDB remains the best source for vulnerability data.

• Responsabile: Jpcert
• Prenotare: 25/06/2025
• Divulgazione: 27/06/2025
• Moderazione: accettato
• Voce: VDB-314076
• CPE: pronto
• CWE: CWE-78 (confermato)
• CVSS: 7.2 (CNA)
• EPSS: 0.01191
• KEV: no
• Attività: molto basso

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2025-36529
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2025-36529
• CVE Details: https://www.cvedetails.com/cve/CVE-2025-36529/