CVE-2025-2071

CriticalCVSS 10.0/10Last modified Jun 17, 2026

Description

A critical OS Command Injection vulnerability has been identified in the FAST LTA Silent Brick WebUI, allowing remote attackers to execute arbitrary operating system commands via specially crafted input. This vulnerability arises due to improper handling of untrusted input, which is passed directly to system-level commands without adequate sanitization or validation. Successful exploitation could allow attackers to execute arbitrary commands on the affected system, potentially resulting in unauthorized access, data leakage, or full system compromise. Affected WebUI parameters are "hd" and "pi".

Metrics

CVSS 4.0 10.0/10CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:P/AU:N/R:X/V:X/RE:M/U:Amber

Weakness enumeration

CWE-78

Affected software

No affected versions have been published.

Timeline

Published
Mar 31, 2025
Last modified
Jun 17, 2026
NVD status
Deferred

Related CVEs from 2025

CVE-2025-207108.8In wlan AP driver, there is a possible out of bounds write due to an integer overflow. This could lead to remote (proximal/adjacent) escalatCVE-2025-207118.8In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote (proximal/adjacent) eCVE-2025-207128.8In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote (proximal/adjacent) eCVE-2025-207137.8In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilegCVE-2025-207147.8In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilegCVE-2025-207157.8In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilegCVE-2025-207167.8In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilegCVE-2025-207177.8In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilegCVE-2025-207187.8In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilegCVE-2025-207198.8In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote (proximal/adjacent) eCVE-2025-20725.1A Reflected Cross-Site Scripting (XSS) vulnerability has been discovered in FAST LTA Silent Brick WebUI, allowing attackers to inject maliciCVE-2025-207208.8In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote (proximal/adjacent) e