PT-2025-33626 · Vowifi+2 · Vowifi+2

Published 2025-08-18 · Updated 2025-08-23 · CVE-2025-31715

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: vowifi (affected versions not specified)

Description: A command injection issue exists in the vowifi service due to improper input validation. This could lead to remote escalation of privilege without requiring additional execution privileges. The vulnerability impacts devices running Mocor5/Android 8.1/9.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2025-31715

Affected Products

Android

Mocor5

Vowifi

References · 13

• https://nvd.nist.gov/vuln/detail/CVE-2025-31715 · Security Note
• https://twitter.com/cracbot/status/1958846657086595233 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1957280483345097078 · Twitter Post
• https://twitter.com/CVEnew/status/1957278983550034112 · Twitter Post
• https://unisoc.com/en_us/secy/announcementDetail/1944933773300793346 · Note
• https://t.me/cveNotify/132607 · Telegram Post
• https://twitter.com/SecAideInfo/status/1958110597507084540 · Twitter Post
• https://twitter.com/offseq/status/1957253731747049857 · Twitter Post
• https://twitter.com/cracbot/status/1959209038245458033 · Twitter Post
• https://twitter.com/cracbot/status/1958484289911226831 · Twitter Post
• https://twitter.com/BaseFortify/status/1957366944903905392 · Twitter Post
• https://twitter.com/CveFindCom/status/1957248566654595123 · Twitter Post
• https://t.me/CVEtracker/30250 · Telegram Post