CVE 8.6 HIGH

CVE-2025-53508_CVE-2025-53508

8.6 / 10
HIGH
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Description

Multiple products provided by iND Co.,Ltd contain an OS command injection vulnerability. If exploited, an arbitrary OS command may be executed and sensitive information may be obtained. As for the details of affected product names and versions, refer to the information under [Product Status].

Basic Information

ID CVE-2025-53508
Source jpcert
Published Aug 29, 2025 at 04:14

Affected Product

Vendor iND Co.,Ltd
Product HL330-DLS (for module MC7700)
Version firmware version 1.03 and earlier
Affected Versions iND Co.,Ltd HL330-DLS (for module MC7700) firmware version 1.03 and earlier
iND Co.,Ltd HL330-DLS (for module MC7330) firmware version 2.02t and earlier
iND Co.,Ltd HL320-DLS (for module MC7700) firmware version 1.03 and earlier
iND Co.,Ltd HL320-DLS (for module MC7330) firmware version 2.02t and earlier
iND Co.,Ltd LM-100 firmware version 1.02 and earlier
iND Co.,Ltd LM-200 (for module AMP570) firmware version 1.02 and earlier
iND Co.,Ltd LM-200 (for module EC25-J) firmware version 1.05e and earlier
iND Co.,Ltd L2X Assist firmware version 2.01 and earlier
iND Co.,Ltd L2X Assist-RS-A firmware version 1.11 and earlier
iND Co.,Ltd L2X Assist-RS-E firmware version 1.12 and earlier
iND Co.,Ltd F2L Assist-SS-A firmware version 1.03 and earlier
iND Co.,Ltd F2L Assist-SS-E firmware version 1.01 and earlier

CWE Classification

References

💭 Join the Security Discussion

🔒 Your email address will not be published. Required fields are marked *

⚠️ Please be respectful and constructive in your comments. Security discussions should remain professional.