PT-2025-44153 · Unknown · Tropos 4Th Gen

CVE-2025-1037 · Publicado 2025-10-28 · Atualizado 2025-10-28

Positive Technologies (AI Summary)

CVSS v4.0

7.5

Alta

Vetor base

AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions TropOS 4th Gen (affected versions not specified)

Description An authenticated user with the ability to run user level shell commands can enable access via secure shell (SSH) to an unrestricted root shell by making minor configuration changes to the device. This is possible through abuse of specific scripts and executables that allow commands to be run as root from an unprivileged context.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Privilege Management

Enumeração de Fraquezas

CWE-269

Identificadores relacionados

CVE-2025-1037

Produtos afetados

Tropos 4Th Gen

Referências · 4

• https://publisher.hitachienergy.com/preview?DocumentID=8DBD000214&LanguageCode=en&DocumentPartId=&Action=Launch · Nota
• https://t.me/cveNotify/140638 · Publicação no Telegram
• https://t.me/CVEtracker/35960 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2025-1037 · Nota de Segurança