CVE-2025-23237

Name of the Vulnerable Software and Affected Versions UD-LT2 firmware versions 1.00.008 SE and earlier

Description An issue exists due to the improper neutralization of special elements used in an OS command, allowing for the execution of arbitrary OS commands if a user logs in to the CLI of the affected product.

Recommendations For versions 1.00.008 SE and earlier, update to a version that addresses the OS Command Injection issue. As a temporary workaround, consider restricting access to the CLI to minimize the risk of exploitation.