PT-2025-48677 · Circutor · Circutor Sge-Plc50+1

Published 2025-12-02 · Updated 2025-12-02 · CVE-2025-11787

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Circutor SGE-PLC1000/SGE-PLC50 versions 9.0.2

Description A command injection issue exists in the operating system of the software. The issue is present in the GetDNS(), CheckPing(), and TraceRoute() functions.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

CVE-2025-11787

Affected Products

Circutor Sge-Plc1000

Circutor Sge-Plc50

References · 4

• https://osv.dev/vulnerability/CVE-2025-11787 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-11787 · Security Note
• https://incibe.es/en/incibe-cert/notices/aviso-sci/multiple-vulnerabilities-circutor-products-0 · Note
• https://t.me/CVEtracker/38666 · Telegram Post