Security Advisory

CVE-2025-8890

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2025-11-27 13:42:53
Last updated 2026-03-18 18:33:41
Assigner CERT-PL
State PUBLISHED

Description

Firmware in SDMC NE6037 routers prior to version 7.1.12.2.44 has a network diagnostics tool vulnerable to a shell command injection attacks. In order to exploit this vulnerability, an attacker has to log in to the routers administrative portal, which by default is reachable only via LAN ports.