PT-2025-48403
CVE-2025-13799
·
Published
2025-12-01
·
Updated
2026-10-18
Description by
CVSS 3.1
9.8
CriticalMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
ADSLR NBR1005GPEV2 version 250814-r037c
Description
A flaw exists in ADSLR NBR1005GPEV2 250814-r037c that allows for remote command injection. The issue is located within the
ap macfilter del function of the /send order.cgi file. Manipulation of the mac argument can lead to unauthorized command execution. The exploit for this issue has been publicly disclosed.Recommendations
As a temporary workaround, consider restricting access to the
/send order.cgi file to minimize the risk of exploitation.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.Exploitability
Exploit
Impacts
Researchers
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾