PT-2025-22716 · Intellian Technologies · Iridium Certus 700

Published 2025-05-23 · Updated 2025-05-24 · CVE-2025-41378

Positive Technologies (AI Summary)

CVSS v4.0

6.9

Medium

Base vector

AV:A/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Name of the Vulnerable Software and Affected Versions The product name cannot be determined.

Description The SSID field is not parsed correctly, allowing it to be used for command injection into the hostpad.conf file. This issue can be exploited by an attacker to gain more knowledge of the system and potentially compromise other devices. The information related to this issue is filtered by the logs function of the web panel.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2025-41378

Affected Products

Iridium Certus 700

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2025-41378 · Security Note
• https://twitter.com/CVEnew/status/1926244486050459926 · Twitter Post
• https://incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-intellian-technologies-iridium-certus · Note