CVE-2025-0626

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

The "monitor" binary in the firmware of the affected product attempts to mount to a hard-coded, routable IP address, bypassing existing device network settings to do so. The function also enables the network interface of the device if it is disabled. The function is triggered by attempting to update the device from the user menu. This could serve as a backdoor to the device, and could lead to a malicious actor being able to upload and overwrite files on the device.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-912

Affected software

No affected versions have been published.

Timeline

Published: Jan 30, 2025
Last modified: Jun 17, 2026
NVD status: Deferred

Related CVEs from 2025

CVE-2025-06273.5The WordPress Tag, Category, and Taxonomy Manager WordPress plugin before 3.30.0 does not sanitise and escape some of its Widgets settings,CVE-2025-06288.1An improper authorization vulnerability exists in the main-latest version of BerriAI/litellm. When a user with the role 'internal_user_viewe CVE-2025-06294.8The Coronavirus (COVID-19) Notice Message WordPress plugin through 1.1.2 does not sanitise and escape some of its settings, which could allo CVE-2025-06306.5Multiple Western Telematic (WTI) products contain a web interface that is vulnerable to a local file inclusion attack (LFI), where any authe CVE-2025-06318.7A Credential Exposure Vulnerability exists in the above-mentioned product and version. The vulnerability is due to using HTTP resulting in c CVE-2025-06329.2Local File Inclusion (LFI) vulnerability in a Render function of Formulatrix Rock Maker Web (RMW) allows a remote attacker to obtain sensiti CVE-2025-06335.1Heap-based Buffer Overflow vulnerability in iniparser_dumpsection_ini() in iniparser allows attacker to read out of bound memory CVE-2025-06349.8Use After Free vulnerability in Samsung Open Source rLottie allows Remote Code Inclusion.This issue affects rLottie: V0.2.CVE-2025-06357.5Denial of service condition in M-Files Server in versions before 25.1.14445.5 allows an unauthenticated user to consume computing resource CVE-2025-06368.4EMCLI contains a high severity vulnerability where improper neutralization of special elements used in an OS command could be exploited lead CVE-2025-06379.8It has been found that the Beta10 software does not provide for proper authorisation control in multiple areas of the application. This defi CVE-2025-06387.5The initial code parsing the manifest did not check the content of the file names yet later code assumed that it was checked and panicked wh