CVE-2025-13605

3onedata modbus gateway device model GW1101-1D(RS-485)-TB-P (hardware version V2.2.0) allows authenticated users to execute arbitrary shell commands in the context of the root user by providing payload in the "IP address" field of the diagnosis test tools. This issue has been resolved in firmware version 3.0.59B2024080600R4353

CVSS

No CVSS.

References

Link	Resource
https://cert.pl/en/posts/2026/05/CVE-2025-13605

Configurations

No configuration.

History

30 Sep 2026, 22:10

Type	Values Removed	Values Added
Summary		(es) El dispositivo gateway Modbus 3onedata modelo GW1101-1D(RS-485)-TB-P (versión de hardware V2.2.0) permite a usuarios autenticados ejecutar comandos shell arbitrarios en el contexto del usuario root al proporcionar payload en el campo de la 'dirección IP' de las herramientas de prueba de diagnóstico. Este problema ha sido resuelto en la versión de firmware 3.0.59B2024080600R4353.

Information

Published : 2026-05-04 15:16

Updated : 2026-10-07 09:10

NVD link : CVE-2025-13605

Mitre link : CVE-2025-13605

CVE.ORG link : CVE-2025-13605

JSON object : View

Products Affected

No product.

CWE

CWE-78

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

{"id": "CVE-2025-13605", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-13605", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2026-05-04T15:28:34.977201Z"}}], "cvssMetricV40": [{"type": "Secondary", "source": "cvd@cert.pl", "cvssData": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "NOT_DEFINED", "baseScore": 9.3, "Automatable": "NOT_DEFINED", "attackVector": "ADJACENT", "baseSeverity": "CRITICAL", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "exploitMaturity": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "userInteraction": "NONE", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "HIGH", "subIntegrityImpact": "HIGH", "vulnIntegrityImpact": "HIGH", "integrityRequirement": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "subAvailabilityImpact": "HIGH", "vulnAvailabilityImpact": "HIGH", "availabilityRequirement": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "subConfidentialityImpact": "HIGH", "vulnConfidentialityImpact": "HIGH", "confidentialityRequirement": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "vulnerabilityResponseEffort": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED"}}]}, "affected": [{"source": "cvd@cert.pl", "affectedData": [{"vendor": "3onedata", "product": "GW1101-1D(RS-485)-TB-P", "versions": [{"status": "affected", "version": "0", "lessThan": "3.0.59B2024080600R4353", "versionType": "custom"}], "defaultStatus": "unaffected"}]}], "published": "2026-05-04T15:16:02.630", "references": [{"url": "https://cert.pl/en/posts/2026/05/CVE-2025-13605", "source": "cvd@cert.pl"}], "vulnStatus": "Awaiting Analysis", "weaknesses": [{"type": "Secondary", "source": "cvd@cert.pl", "description": [{"lang": "en", "value": "CWE-78"}]}], "descriptions": [{"lang": "en", "value": "3onedata modbus gateway device model\u00a0GW1101-1D(RS-485)-TB-P (hardware version V2.2.0)\u00a0allows authenticated users to execute arbitrary shell commands in the context of the root user by providing payload in the \"IP address\" field of the diagnosis test tools.\nThis issue has been resolved in firmware version 3.0.59B2024080600R4353"}, {"lang": "es", "value": "El dispositivo gateway Modbus 3onedata modelo GW1101-1D(RS-485)-TB-P (versi\u00f3n de hardware V2.2.0) permite a usuarios autenticados ejecutar comandos shell arbitrarios en el contexto del usuario root al proporcionar payload en el campo de la 'direcci\u00f3n IP' de las herramientas de prueba de diagn\u00f3stico. Este problema ha sido resuelto en la versi\u00f3n de firmware 3.0.59B2024080600R4353."}], "lastModified": "2026-10-07T09:10:00.160", "sourceIdentifier": "cvd@cert.pl"}