PT-2025-48267 · Sdmc · Sdmc Ne6037 Routers

Grzegorz Bronka · Published 2025-11-27 · Updated 2026-01-28 · CVE-2025-8890

Positive Technologies (AI Summary)

CVSS v4.0

9.3

Critical

Base vector

AV:A/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Name of the Vulnerable Software and Affected Versions SDMC NE6037 routers versions prior to 7.1.12.2.44

Description The firmware in SDMC NE6037 routers contains a network diagnostics tool susceptible to shell command injection attacks. Exploitation requires an attacker to log in to the router's administrative portal, which is typically accessible only through LAN ports. Successful exploitation could lead to remote code execution.

Recommendations Versions prior to 7.1.12.2.44 should be updated to version 7.1.12.2.44 or later.

Exploit

Fix

RCE

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

CVE-2025-8890

Affected Products

Sdmc Ne6037 Routers

References · 11

• 🔥 https://securitum.com/cve-2025-8890.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-8890 · Security Note
• https://twitter.com/AnonOzzyDude/status/1994084773254361593 · Twitter Post
• https://twitter.com/0dayPublishing/status/1994042296287822145 · Twitter Post
• https://cert.pl/en/posts/2025/11/CVE-2025-8890 · Note
• https://t.me/cveNotify/150164 · Telegram Post
• https://t.me/CVEtracker/38392 · Telegram Post
• https://t.me/cveNotify/144189 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1994052227439132948 · Twitter Post
• https://twitter.com/offseq/status/1994210523852738776 · Twitter Post
• https://twitter.com/CVEnew/status/1994042718671061230 · Twitter Post