PT-2025-30551 · Iotgen · Iotgen

Reid Wightman · Published 2025-07-23 · Updated 2025-08-18 · CVE-2025-41684

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions versions prior to 2.3

Description An authenticated remote attacker can execute arbitrary commands with root privileges on affected devices due to improper sanitizing of user input in the Main Web Interface (endpoint tls iotgen setting).

Recommendations Update to version 2.3 or later.

Fix

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

CVE-2025-41684

Affected Products

Iotgen

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2025-41684 · Security Note
• https://twitter.com/DavidMarquet19/status/1957336776126685393 · Twitter Post
• https://t.me/CVEtracker/28477 · Telegram Post
• https://twitter.com/CVEnew/status/1947943065802469500 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1948070454716993823 · Twitter Post
• https://t.me/cveNotify/129960 · Telegram Post
• https://certvde.com/de/advisories/VDE-2025-052 · Note