PT-2025-40984 · Unknown · Command Line Interface

Andrea Palanca · Published 2025-10-07 · Updated 2025-10-12 · CVE-2025-3719

Positive Technologies (AI Summary)

CVSS v3.1

8.1

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

Name of the Vulnerable Software and Affected Versions versions prior to 2025-3719

Description An access control issue exists in the Command Line Interface (CLI) functionality. A specific access restriction is not properly enforced for users with limited privileges. This allows an authenticated user with limited privileges to execute administrative CLI commands. Successful exploitation can lead to alterations in the device configuration and/or impact the device’s availability.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Incorrect Authorization

Weakness Enumeration

CWE-863

Related Identifiers

CVE-2025-3719

Affected Products

Command Line Interface

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2025-3719 · Security Note
• https://security.nozominetworks.com/NN-2025:5-01 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-3719 · Vendor Advisory
• https://twitter.com/CVEnew/status/1975548414621282657 · Twitter Post
• https://twitter.com/cracbot/status/1977328461594116320 · Twitter Post
• https://t.me/CVEtracker/34306 · Telegram Post
• https://t.me/cveNotify/137637 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1975573137723900013 · Twitter Post