CVE-2025-37146: Unauthorized Filesystem Operations in System Firmware allow Authenticated Remote Code Execution
A vulnerability in the web-based management interface of network access point configuration services could allow an authenticated remote attacker to perform remote command execution. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system.
Event History
Frequently Asked Questions
What is the severity of CVE-2025-37146?
The severity of CVE-2025-37146 is classified as high with a score of 7.2.
What type of attack does CVE-2025-37146 facilitate?
CVE-2025-37146 enables an authenticated remote attacker to perform remote code execution on the affected system.
How does CVE-2025-37146 impact the system?
CVE-2025-37146 allows for unauthorized filesystem operations that can lead to arbitrary command execution on the operating system.
Who is affected by CVE-2025-37146?
CVE-2025-37146 impacts devices using vulnerable web-based management interfaces for network access point configuration services.
How can organizations mitigate CVE-2025-37146?
To mitigate CVE-2025-37146, organizations should apply security patches provided by the vendor and restrict access to vulnerable management interfaces.