CVE-2025-3361: HGiga iSherlock - OS Command Injection
Published Apr 8, 2025
·Updated
The web service of iSherlock from HGiga has an OS Command Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary OS commands and execute them on the server.
Affected Software
1 affected component
Hgiga iSherlock
Remediation
Information
For iSherlock 4.5, please update package iSherlock-user-4.5 to version 236 or later.
For iSherlock 5.5, please update package iSherlock-user-5.5 to version 236 or later.
Event History
Apr 8, 2025
CVE Published
via MITRE·02:00 AM
Data Sourced
via MITRE·02:00 AM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·02:15 AM
DescriptionSeverityWeakness
Jun 20, 57255
Event
via FIRST·02:41 PM
Frequently Asked Questions
1
What is the severity of CVE-2025-3361?
CVE-2025-3361 is considered a high severity vulnerability due to its potential for remote code execution.
2
How do I fix CVE-2025-3361?
To fix CVE-2025-3361, update to the latest version of HGiga iSherlock that addresses this OS Command Injection vulnerability.
3
Who is affected by CVE-2025-3361?
CVE-2025-3361 affects users of the HGiga iSherlock web service.
4
What kind of vulnerability is CVE-2025-3361?
CVE-2025-3361 is an OS Command Injection vulnerability that allows attackers to execute arbitrary commands on the server.
5
Can CVE-2025-3361 be exploited remotely?
Yes, CVE-2025-3361 can be exploited by unauthenticated remote attackers.