CVE-2025-3362: HGiga iSherlock - OS Command Injection
Published Apr 8, 2025
·Updated
The web service of iSherlock from HGiga has an OS Command Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary OS commands and execute them on the server.
Affected Software
1 affected component
Hgiga iSherlock
Remediation
Information
For iSherlock 4.5, please update package iSherlock-user-4.5 to version 236 or later.
For iSherlock 5.5, please update package iSherlock-user-5.5 to version 236 or later.
Event History
Apr 8, 2025
CVE Published
via MITRE·02:03 AM
Data Sourced
via MITRE·02:03 AM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·02:15 AM
DescriptionSeverityWeakness
Jun 20, 57255
Event
via FIRST·02:41 PM
Frequently Asked Questions
1
What is the severity of CVE-2025-3362?
CVE-2025-3362 is rated as a critical vulnerability due to its potential for remote code execution.
2
How do I fix CVE-2025-3362?
To fix CVE-2025-3362, it is essential to update the iSherlock software to the latest version that addresses this vulnerability.
3
What are the potential impacts of CVE-2025-3362?
The potential impacts of CVE-2025-3362 include unauthorized access to the server and execution of arbitrary commands.
4
Who is affected by CVE-2025-3362?
CVE-2025-3362 affects users of the iSherlock web service from HGiga.
5
Is authentication required to exploit CVE-2025-3362?
No, CVE-2025-3362 can be exploited by unauthenticated remote attackers.