PT-2025-46941 · Ncp-Hg100 · Ncp-Hg100
CVE-2025-64444
·
Published
2025-11-14
·
Updated
2025-11-14
CVSS v3.1
7.2
High
| Vector | AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
NCP-HG100 versions 1.4.48.16 and earlier
Description
An issue exists where special elements are not properly neutralized when used in operating system commands, potentially leading to OS Command Injection. A remote attacker who has valid authentication credentials for the management page can execute arbitrary OS commands with root privileges.
Recommendations
Update NCP-HG100 to a version later than 1.4.48.16.
Fix
LPE
OS Command Injection
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Ncp-Hg100