CVE-2025-67447

The network diagnosis (ping) module in Neterbit NW-431F Router 20241014-IR03 and before is vulnerable to OS command injection. The application does not properly sanitize user input in the IP address field before passing it to the system's ping command. An attacker can inject arbitrary OS commands, which will be executed with the privileges of the web server.

CVSS v3 9.8 CRITICAL

9.8^/10

CVSS v3 : CRITICAL

Vector :

Exploitability : 3.9 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://github.com/fun-beep/CVEs/tree/main/CVE-2025-67447
https://neterbit.com/
https://github.com/fun-beep/CVEs/tree/main/CVE-2025-67447

Configurations

No configuration.

History

No history.

Information

Published : 2026-06-04 18:16

Updated : 2026-07-22 20:10

NVD link : CVE-2025-67447

Mitre link : CVE-2025-67447

CVE.ORG link : CVE-2025-67447

JSON object : View

Products Affected

No product.

CWE

CWE-78

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

{"id": "CVE-2025-67447", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-67447", "role": "CISA Coordinator", "options": [{"exploitation": "poc"}, {"automatable": "yes"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2026-06-04T17:57:03.691006Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "cve@mitre.org", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 3.9}]}, "affected": [{"source": "cve@mitre.org", "affectedData": [{"vendor": "n/a", "product": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}]}], "published": "2026-06-04T18:16:27.703", "references": [{"url": "https://github.com/fun-beep/CVEs/tree/main/CVE-2025-67447", "source": "cve@mitre.org"}, {"url": "https://neterbit.com/", "source": "cve@mitre.org"}, {"url": "https://github.com/fun-beep/CVEs/tree/main/CVE-2025-67447", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "description": [{"lang": "en", "value": "CWE-78"}]}], "descriptions": [{"lang": "en", "value": "The network diagnosis (ping) module in Neterbit NW-431F Router 20241014-IR03 and before is vulnerable to OS command injection. The application does not properly sanitize user input in the IP address field before passing it to the system's ping command. An attacker can inject arbitrary OS commands, which will be executed with the privileges of the web server."}, {"lang": "es", "value": "El m\u00f3dulo de diagn\u00f3stico de red (ping) en el router Neterbit NW-431F 20241014-IR03 y versiones anteriores es vulnerable a la inyecci\u00f3n de comandos del sistema operativo. La aplicaci\u00f3n no sanitiza correctamente la entrada del usuario en el campo de direcci\u00f3n IP antes de pasarlo al comando ping del sistema. Un atacante puede inyectar comandos arbitrarios del sistema operativo, que se ejecutar\u00e1n con los privilegios del servidor web."}], "lastModified": "2026-07-22T20:10:00.127", "sourceIdentifier": "cve@mitre.org"}