CVE-2025-2367

Name of the Vulnerable Software and Affected Versions Oiwtech OIW-2431APGN-HP version 2.5.3-B20131128

Description A critical issue has been discovered, affecting the Personal Script Submenu component, specifically the file /boafrm/formScript. This issue leads to os command injection and can be initiated remotely. The vendor was contacted about the disclosure but did not respond.

Recommendations For Oiwtech OIW-2431APGN-HP version 2.5.3-B20131128, as a temporary workaround, consider restricting access to the /boafrm/formScript file to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.