CVE Details
Basic Information
| Title | Netcore POWER13 Query String cgi-bin command injection |
|---|---|
| Type | cve |
| Published | 2025-05-25T05:31:04.552Z |
| Last Seen |
Product Information
| Vendor | Netcore |
|---|---|
| Product | NBR1005GPEV2 |
| Version | 20250508 |
CVSS Information
| Base Score | 5.3 (MEDIUM) |
|---|---|
| Attack Vector | CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N |
| Confidentiality Impact | |
| Integrity Impact | |
| Availability Impact |
AI Analysis
| AI Description | A critical vulnerability in Netcore NBR1005GPEV2, B6V2, COVER5, NAP830, NAP930, NBR100V2, NBR200V2, and POWER13 up to 20250508 allows remote attackers to execute arbitrary commands via a crafted query string to the /www/cgi-bin/ component. The exploit is publicly available and may be actively used. |
|---|---|
| AI Severity | Medium |
| Vendor | Netcore |
| Product | NBR1005GPEV2, B6V2, COVER5, NAP830, NAP930, NBR100V2, NBR200V2, POWER13 |
| Affected Version | Up to 20250508 |
Additional Information
| CVE List | |
|---|---|
| CWE List | CWE-77, CWE-74 |
| Bulletin Family | |
| Source Data | Netcore NBR1005GPEV2 20250508 Netcore B6V2 20250508 Netcore COVER5 20250508 Netcore NAP830 20250508 Netcore NAP930 20250508 Netcore NBR100V2 20250508 Netcore NBR200V2 20250508 Netcore POWER13 20250508 |
Source Information
Description
A vulnerability, which was classified as critical, was found in Netcore NBR1005GPEV2, B6V2, COVER5, NAP830, NAP930, NBR100V2, NBR200V2 and POWER13 up to 20250508. This affects an unknown part of the file /www/cgi-bin/ of the component Query String Handler. The manipulation leads to command injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS Score Summary
Base Score: 5.3 (MEDIUM)