CVE-2025-32821

HIGH Year: 2025
CVSS v3 Score
7.1
High
Weakness Type
CWE-78
View all →

Vulnerability Description

A vulnerability in SMA100 allows a remote authenticated attacker with SSLVPN admin privileges can with admin privileges can inject shell command arguments to upload a file on the appliance.

Related Vulnerabilities

CVE-2017-6601

HIGH
CVSS:7.1(High)

A vulnerability in the CLI of the Cisco Unified Computing System (UCS) Manager, Cisco Firepower 4100 Series Next-Generation Firewall (NGFW), and Cisco Firepower 9300 Security Appliance could allow an ...

CWE-782017

CVE-2019-14889

HIGH
CVSS:7.1(High)

A flaw was found with the libssh API function ssh_scp_new() in versions before 0.9.3 and before 0.8.8. When the libssh SCP client connects to a server, the scp command, which includes a user-provided ...

CWE-782019

CVE-2023-41838

HIGH
CVSS:7.1(High)

An improper neutralization of special elements used in an os command ('os command injection') in FortiManager 7.4.0 and 7.2.0 through 7.2.3 may allow attacker to execute unauthorized code or commands ...

CWE-782023

CVE-2018-3836

HIGH
CVSS:7.0(High)

An exploitable command injection vulnerability exists in the gplotMakeOutput function of Leptonica 1.74.4. A specially crafted gplot rootname argument can cause a command injection resulting in arbitr...

CWE-782018

CVE-2019-1883

HIGH
CVSS:7.0(High)

A vulnerability in the command-line interface of Cisco Integrated Management Controller (IMC) could allow an authenticated, local attacker with read-only credentials to inject arbitrary commands that ...

CWE-782019

CVE-2021-31799

HIGH
CVSS:7.0(High)

In RDoc 3.11 through 6.x before 6.3.1, as distributed with Ruby through 3.0.1, it is possible to execute arbitrary code via | and tags in a filename.

CWE-782021