Main Vulnerability Database Vulnerabilities #VU111867

OS Command Injection in WRH-733GBK and WRH-733GWH - CVE-2025-48890

Published: June 24, 2025

Vulnerability identifier: #VU111867

CSH Severity: High

CVSS v4: 9.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2025-48890

CWE-ID: CWE-78

Exploitation vector: Remote access

Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a remote attacker to execute arbitrary shell commands on the target system.

The vulnerability exists due to improper input validation in miniigd SOAP service. A remote unauthenticated attacker can pass specially crafted data to the application and execute arbitrary OS commands on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.

Affected software

WRH-733GBK
WRH-733GWH

How to mitigate CVE-2025-48890

Cybersecurity Help is currently unaware of any official solution to address this vulnerability.

External References

https://jvn.jp/en/jp/JVN39435597/index.html

Related Security Bulletins