5.3
/ 10
MEDIUM
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
Description
A vulnerability has been found in ADSLR NBR1005GPEV2 250814-r037c. This vulnerability affects the function ap_macfilter_del of the file /send_order.cgi. The manipulation of the argument mac leads to command injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Basic Information
ID
CVE-2025-13799
Source
VulDB
Published
Dec 1, 2025 at 01:02
Affected Product
Vendor
ADSLR
Product
NBR1005GPEV2
Version
250814-r037c
Affected Versions
ADSLR NBR1005GPEV2 250814-r037c