CVE-2025-54322 in SXZOS

Riassunto

di MITRE • 27/12/2025

Xspeeder SXZOS through 2025-12-26 allows root remote code execution via base64-encoded Python code in the chkid parameter to vLogin.py. The title and oIP parameters are also used.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

• Responsabile: MITRE
• Prenotare: 20/07/2025
• Divulgazione: 27/12/2025
• Moderazione: accettato
• Voce: VDB-338530
• CPE: pronto
• CWE: CWE-95 (confermato)
• CVSS: 9.8 (NVD)
• EPSS: 0.14228
• KEV: no
• Attività: molto basso

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2025-54322
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2025-54322
• CVE Details: https://www.cvedetails.com/cve/CVE-2025-54322/