CVE-2025-41427

Publication date

2025-06-24 04:37:09

Family

jpcert

State

PUBLISHED

Description

WRC-X3000GS, WRC-X3000GSA, and WRC-X3000GSN contain an improper neutralization of special elements used in an OS command (OS Command Injection) vulnerability in Connection Diagnostics page. If a remote authenticated attacker sends a specially crafted request to the affected product, an arbitrary OS command may be executed.