PT-2025-19913
CVE-2025-4041
·
Published
2025-05-06
·
Updated
2025-05-12
Description by
CVSS 4.0
9.3
CriticalMetricsAV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Name of the Vulnerable Software and Affected Versions
Optigo Networks ONS NC600 versions 4.2.1-084 through 4.7.2-330
Description
An issue exists where an attacker could connect to the device's ssh server and utilize the system's components to perform OS command executions.
Recommendations
For Optigo Networks ONS NC600 versions 4.2.1-084 through 4.7.2-330, consider changing the default
username and password to prevent unauthorized access, and restrict access to the ssh server to minimize the risk of exploitation.
At the moment, there is no information about a newer version that contains a fix for this vulnerability. Found an issue in the description? Have something to add? Feel free to write us 👾