CVE-2025-67447

Name of the Vulnerable Software and Affected Versions Neterbit NW-431F Router versions prior to 20241014-IR03

Description The network diagnosis (ping) module allows OS command injection because the application fails to properly sanitize user input in the IP address field before passing it to the system's ping command. This allows an attacker to inject and execute arbitrary OS commands with the privileges of the web server.

Recommendations Update to a version newer than 20241014-IR03. As a temporary workaround, restrict access to the network diagnosis (ping) module to minimize the risk of exploitation.