CVE-2025-9583 in CF-N1

Sumário

de MITRE • 28/08/2025

A vulnerability has been found in Comfast CF-N1 2.6.0. Affected by this vulnerability is the function ping_config of the file /usr/bin/webmgnt. The manipulation leads to command injection. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and may be used.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• Responsável: VulDB
• Divulgação: 28/08/2025
• Moderação: aceite
• Entrada: VDB-321696
• CPE: pronto
• CWE: CWE-77 (confirmado)
• Exploração: Descarregar
• CVSS: 8.8 (NVD)
• EPSS: 0.05075
• KEV: não
• Atividades: muito baixo

Fontes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2025-9583
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2025-9583
• CVE Details: https://www.cvedetails.com/cve/CVE-2025-9583/