CVE-2025-71284
🔴 Łataj teraz
Wstrzyknięcie poleceń w Synway SMG Gateway umożliwia zdalne wykonanie kodu.
CVSS
9.8
EPSS
5.7%
Exploit
poc
Vendor
synway
Opis źródłowy (NVD)
Synway SMG Gateway Management Software contains an OS command injection vulnerability in the RADIUS configuration endpoint at /en/9-2radius.php where the radius_address POST parameter is split and interpolated directly into a sed command without sanitization. An unauthenticated remote attacker can inject arbitrary shell commands by submitting a POST request with crafted radius_address, radius_address2, shared_secret2, source_ip, timeout, or retry parameters along with save=1 and enable_radius=1 to achieve remote code execution. Exploitation evidence was first observed by the Shadowserver Foundation on 2025-07-11 (UTC).
exploit rce
Brak patcha
Źródła i daty
| Źródło | Wartość |
|---|---|
| NVD – CVSS | 9.8 |
| CISA KEV (aktywnie wykorzystywane) | Nie |
| FIRST EPSS (prawdopodobieństwo exploita) | 5.7% |
| Opublikowano (NVD) | 2026-04-30 17:16:25 UTC |
| Ostatnia modyfikacja (NVD) | 2026-10-07 09:10:00 UTC |
Referencje
- https://github.com/projectdiscovery/nuclei-templates/blob/main/http/vulnerabilities/synway/synwaysmg-radius-rce.yaml ([email protected]) [Third Party Advisory]
- https://mp.weixin.qq.com/s/PyepoFSuQ63E3RnpQa9nsA ([email protected]) [Exploit, Third Party Advisory]
- https://mrxn.net/jswz/synway-9-2radius-rce.html ([email protected]) [Exploit, Third Party Advisory]
- https://www.synway.net/ ([email protected]) [Product]
- https://www.vulncheck.com/advisories/synway-smg-gateway-management-software-os-command-injection-via-radius-address ([email protected]) [Third Party Advisory]