CVE-2019-25024: OS Command Injection
Published Feb 19, 2021
·Updated
OpenRepeater (ORP) before 2.2 allows unauthenticated command injection via shell metacharacters in the functions/ajaxsystem.php postservice parameter.
Affected Software
1 affected component
Alleghenycreative Openrepeater<2.2
Event History
Feb 19, 2021
CVE Published
via MITRE·03:37 AM
Data Sourced
via MITRE·03:37 AM
Description
Dec 3, 2025
Exploit Published
12:00 AM
Known Exploited
11:13 AM
Frequently Asked Questions
1
What is the severity of CVE-2019-25024?
CVE-2019-25024 is considered a critical vulnerability due to the potential for unauthenticated command injection.
2
How do I fix CVE-2019-25024?
To fix CVE-2019-25024, upgrade OpenRepeater to version 2.2 or later.
3
What are the risks associated with CVE-2019-25024?
The risks of CVE-2019-25024 include unauthorized command execution, which can lead to system compromise.
4
How does CVE-2019-25024 affect user data?
CVE-2019-25024 can potentially jeopardize user data integrity and confidentiality by allowing attackers to execute arbitrary commands.
5
Is CVE-2019-25024 exploitable remotely?
Yes, CVE-2019-25024 can be exploited remotely without authentication, making it particularly dangerous.