CVE-2025-14213 in Cato Socket

요약 (영어)

Cato Networks’ Socket versions prior to 25 contain a command injection vulnerability that allows an authenticated attacker with access to the Socket web interface (UI) to execute arbitrary operating system commands as the root user on the Socket’s internal system.

책임이 있는

Cato

예약하다

2025. 12. 07.

공개

2026. 03. 31.

엔트리

VulDB provides additional information and datapoints for this CVE:

아이디	취약성	CWE	악용	대책	CVE
354356	Cato Socket Socket Web 권한 상승	78	정의되지 않음	공식 수정	CVE-2025-14213