CVE-2025-27079

MEDIUM Year: 2025
CVSS v3 Score
6.0
Medium
Weakness Type
CWE-78
View all →

Vulnerability Description

A vulnerability in the file creation process on the command line interface of AOS-8 Instant and AOS-10 AP could allow an authenticated remote attacker to perform remote code execution (RCE). Successful exploitation could allow an attacker to execute arbitrary operating system commands on the underlying operating system leading to potential system compromise.

Related Vulnerabilities

CVE-2023-51699

MEDIUM
CVSS:6.0(Medium)

Fluid is an open source Kubernetes-native Distributed Dataset Orchestrator and Accelerator for data-intensive applications. An OS command injection vulnerability within the Fluid project's JuicefsRunt...

CWE-782023

CVE-2024-20461

MEDIUM
CVSS:6.0(Medium)

A vulnerability in the CLI of Cisco ATA 190 Series Analog Telephone Adapter firmware could allow an authenticated, local attacker with high privileges to execute arbitrary commands as the root us...

CWE-782024

CVE-2022-0764

MEDIUM
CVSS:6.1(Medium)

Arbitrary Command Injection in GitHub repository strapi/strapi prior to 4.1.0.

CWE-782022

CVE-2022-22454

MEDIUM
CVSS:5.9(Medium)

IBM InfoSphere Information Server 11.7 could allow a locally authenticated attacker to execute arbitrary commands on the system by sending a specially crafted request.

CWE-782022

CVE-2023-34980

MEDIUM
CVSS:5.9(Medium)

An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to execute commands v...

CWE-782023

CVE-2024-20275

MEDIUM
CVSS:6.1(Medium)

A vulnerability in the cluster backup feature of Cisco Secure Firewall Management Center (FMC) Software, formerly Firepower Management Center Software, could allow an authenticated, remote attacker to...

CWE-782024