PT-2025-41990 · Unknown · Network Access Point Configuration Services

Zzcentury · Published 2025-10-14 · Updated 2025-10-16 · CVE-2025-37146

Positive Technologies (AI Summary)

CVSS v3.1

7.2

High

Base vector

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions network access point configuration services (affected versions not specified)

Description A flaw exists in the web-based management interface of network access point configuration services that could allow a remote attacker with authentication to execute commands on the operating system. Successful exploitation may allow an attacker to execute arbitrary commands with the privileges of the web management interface, potentially leading to full compromise of the device.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Command Injection

Weakness Enumeration

CWE-77

Related Identifiers

CVE-2025-37146

Affected Products

Network Access Point Configuration Services

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2025-37146 · Security Note
• https://twitter.com/CVEnew/status/1978932594235576379 · Twitter Post
• https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw04958en_us&docLocale=en_US · Note
• https://twitter.com/CveTodo/status/1978166423865168183 · Twitter Post