CVE-2025-23094

HIGH Year: 2025
CVSS v3 Score
7.3
High
Weakness Type
CWE-77
View all →

Vulnerability Description

The Platform component of Mitel OpenScape 4000 and OpenScape 4000 Manager V11 R0.22.0 through V11 R0.22.1, V10 R1.54.0 through V10 R1.54.1, and V10 R1.42.6 and earlier could allow an unauthenticated attacker to conduct a command injection attack due to insufficient parameter sanitization. A successful exploit could allow an attacker to execute arbitrary commands within the same privilege level as the web access process.

Related Vulnerabilities

CVE-1999-0039

HIGH
CVSS:7.3(High)

webdist CGI program (webdist.cgi) in SGI IRIX allows remote attackers to execute arbitrary commands via shell metacharacters in the distloc parameter.

CWE-771999

CVE-2017-15403

HIGH
CVSS:7.3(High)

Insufficient data validation in crosh could lead to a command injection under chronos privileges in Networking in Google Chrome on Chrome OS prior to 61.0.3163.113 allowed a local attacker to execute ...

CWE-772017

CVE-2018-19015

HIGH
CVSS:7.3(High)

An attacker could inject commands to launch programs and create, write, and read files on CX-Supervisor (Versions 3.42 and prior) through a specially crafted project file. An attacker could exploit th...

CWE-772018

CVE-2019-20655

HIGH
CVSS:7.3(High)

Certain NETGEAR devices are affected by command injection by an authenticated user. This affects XR500 before 2.3.2.56 and XR700 before 1.0.1.20.

CWE-772019

CVE-2020-4059

HIGH
CVSS:7.3(High)

In mversion before 2.0.0, there is a command injection vulnerability. This issue may lead to remote code execution if a client of the library calls the vulnerable method with untrusted input. This vul...

CWE-772020

CVE-2021-27702

HIGH
CVSS:7.3(High)

Sercomm Router Etisalat Model S3- AC2100 is affected by Incorrect Access Control via the diagnostic utility in the router dashboard.

CWE-772021