CVE-2025-25504: Command Injection

Published May 5, 2025

Updated

An issue in the /usr/local/bin/jncs.sh script of Gefen WebFWC (In AV over IP products) v1.85h, v1.86v, and v1.70 allows attackers with network access to connect to the device over TCP port 4444 without authentication and execute arbitrary commands with root privileges.

Affected Software

6 affected components

Gefen WebFWC

All of the following

Niceforyou Gefen Webfwc=1.70v

Niceforyou Gefen Gf-avip-mc Firmware=a5.22

All of the following

Any of the following

Niceforyou Gefen Webfwc=1.85h

Niceforyou Gefen Webfwc=1.86v

Niceforyou Gefen Gf-avip-mc Firmware=a5.310

Event History

May 5, 2025

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Data Sourced

via NVD·04:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2025-25504?

CVE-2025-25504 has a high severity level due to its ability to allow unauthenticated remote access and execution of arbitrary commands.

How do I fix CVE-2025-25504?

To fix CVE-2025-25504, it is recommended to disable TCP port 4444 access in the Gefen WebFWC script and upgrade to the latest patched version.

What products are affected by CVE-2025-25504?

CVE-2025-25504 affects Gefen WebFWC versions v1.85h, v1.86v, and v1.70.

Can CVE-2025-25504 be exploited remotely?

Yes, CVE-2025-25504 can be exploited remotely by attackers with network access to the device.

What are the potential impacts of CVE-2025-25504?

The potential impacts of CVE-2025-25504 include unauthorized command execution with root privileges, leading to full compromise of the affected device.