PT-2025-44152 · Unknown · Tropos 4Th Gen

Published 2025-10-28 · Updated 2025-10-28 · CVE-2025-1036

Positive Technologies (AI Summary)

CVSS v4.0

8.7

High

Base vector

AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions TropOS 4th Gen (affected versions not specified)

Description A command injection vulnerability exists in the “Logging” page of the web-based configuration utility. An authenticated user with low privileged network access for the configuration utility can execute arbitrary commands on the underlying OS. This can lead to obtaining root SSH access to the device. The vulnerable page is the “Logging” page, and the vulnerability allows execution of commands on the OS.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

CVE-2025-1036

Affected Products

Tropos 4Th Gen

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2025-1036 · Security Note
• https://t.me/CVEtracker/35959 · Telegram Post
• https://t.me/cveNotify/140637 · Telegram Post
• https://publisher.hitachienergy.com/preview?DocumentID=8DBD000214&LanguageCode=en&DocumentPartId=&Action=Launch · Note
• https://twitter.com/CveFindCom/status/1983151820684820683 · Twitter Post