CVE-2025-34117: Netcore / Netis Routers RCE via UDP Port 53413 Backdoor
A remote code execution vulnerability exists in multiple Netcore and Netis routers models with firmware released prior to August 2014 due to the presence of an undocumented backdoor listener on UDP port 53413. Exact version boundaries remain undocumented. An unauthenticated remote attacker can send specially crafted UDP packets to execute arbitrary commands on the affected device. This backdoor uses a hardcoded authentication mechanism and accepts shell commands post-authentication. Some device models include a non-standard implementation of the echo command, which may affect exploitability.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-34117?
CVE-2025-34117 is rated as a critical security vulnerability due to its potential for remote code execution.
How do I fix CVE-2025-34117?
To mitigate CVE-2025-34117, users should upgrade their Netcore and Netis routers to firmware released after August 2014.
What devices are affected by CVE-2025-34117?
CVE-2025-34117 affects multiple models of Netcore and Netis routers with firmware released prior to August 2014.
Can CVE-2025-34117 be exploited remotely?
Yes, CVE-2025-34117 can be exploited remotely due to the undocumented backdoor listener on UDP port 53413.
What are the potential consequences of CVE-2025-34117?
The potential consequences of CVE-2025-34117 include unauthorized access to the router and the ability for attackers to execute arbitrary code.