PT-2025-48267 · Sdmc · Sdmc Ne6037 Routers

Grzegorz Bronka · Published 2025-11-27 · Updated 2025-11-28 · CVE-2025-8890

Positive Technologies · (AI Summary)

CVSS v4.0

9.3

9.3

Critical

Base vector

AV:A/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

Name of the Vulnerable Software and Affected Versions SDMC NE6037 routers versions prior to 7.1.12.2.44

Description The network diagnostics tool in SDMC NE6037 routers is susceptible to a shell command injection attack. Exploitation requires an attacker to log in to the router's administrative portal, which is accessible only through LAN ports. The vulnerability allows for remote code execution after authentication.

Recommendations Update SDMC NE6037 router firmware to version 7.1.12.2.44 or later.

Fix

RCE

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

CVE-2025-8890

Affected Products

Sdmc Ne6037 Routers

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2025-8890 · Security Note
• https://twitter.com/0dayPublishing/status/1994042296287822145 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1994052227439132948 · Twitter Post
• https://cert.pl/en/posts/2025/11/CVE-2025-8890 · Note
• https://twitter.com/AnonOzzyDude/status/1994084773254361593 · Twitter Post
• https://twitter.com/CVEnew/status/1994042718671061230 · Twitter Post
• https://twitter.com/offseq/status/1994210523852738776 · Twitter Post