CVE-2025-57200: Command Injection

Published Dec 3, 2025

Updated

AVTECH SECURITY Corporation DGM1104 FullImg-1015-1004-1006-1003 was discovered to contain an authenticated command injection vulnerability in the testmail function. This vulnerability allows attackers to execute arbitrary commands via a crafted input.

Affected Software

3 affected components

AVTECH DGM1104=FullImg-1015-1004-1006-1003

All of the following

AVTECH Dgm1104 Firmware

AVTECH DGM1104

Event History

Dec 3, 2025

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Data Sourced

via NVD·03:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2025-57200?

CVE-2025-57200 has been classified as a high severity vulnerability due to its potential for authenticated command injection.

How do I fix CVE-2025-57200?

To fix CVE-2025-57200, users should update their AVTECH DGM1104 devices to the latest firmware version that addresses this vulnerability.

What does CVE-2025-57200 affect?

CVE-2025-57200 specifically affects AVTECH DGM1104 devices running FullImg-1015-1004-1006-1003.

What can an attacker do with CVE-2025-57200?

An attacker exploiting CVE-2025-57200 can execute arbitrary commands on the affected device via crafted input in the test_mail function.

Is CVE-2025-57200 an authenticated vulnerability?

Yes, CVE-2025-57200 is an authenticated command injection vulnerability, meaning that an attacker requires valid credentials to exploit it.