PT-2025-14378 · Infinxt · Infinxt Iedge 100

Published 2025-04-01 · Updated 2025-04-05 · CVE-2025-26055

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Infinxt iEdge 100 version 2.1.32

Description An OS Command Injection issue exists in the Troubleshoot module, specifically in the tracertVal parameter of the Tracert function.

Recommendations For Infinxt iEdge 100 version 2.1.32, consider restricting access to the Tracert function or the tracertVal parameter to minimize the risk of exploitation until a patch is available.

Exploit

Fix

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

CVE-2025-26055

Affected Products

Infinxt Iedge 100

References · 5

• 🔥 https://github.com/rohan-pt/CVE-2025-26055 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-26055 · Security Note
• https://t.me/cvedetector/21801 · Telegram Post
• https://twitter.com/CVEnew/status/1908663716255760567 · Twitter Post
• https://t.me/cvetracker/20506 · Telegram Post