CVE-2025-57201: Command Injection

Published Dec 3, 2025

Updated

AVTECH SECURITY Corporation DGM1104 FullImg-1015-1004-1006-1003 was discovered to contain an authenticated command injection vulnerability in the SMB server function. This vulnerability allows attackers to execute arbitrary commands via a crafted input.

Affected Software

3 affected components

AVTECH DGM1104=FullImg-1015-1004-1006-1003

All of the following

AVTECH Dgm1104 Firmware

AVTECH DGM1104

Event History

Dec 3, 2025

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Data Sourced

via NVD·04:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2025-57201?

The severity of CVE-2025-57201 is considered high due to the potential for arbitrary command execution.

How do I fix CVE-2025-57201?

To fix CVE-2025-57201, update the firmware of the AVTECH DGM1104 to the latest version provided by the manufacturer.

Who is affected by CVE-2025-57201?

CVE-2025-57201 affects users of the AVTECH DGM1104 with firmware version FullImg-1015-1004-1006-1003.

What kind of vulnerability is CVE-2025-57201?

CVE-2025-57201 is an authenticated command injection vulnerability within the SMB server function.

Can CVE-2025-57201 be exploited remotely?

Yes, CVE-2025-57201 can be exploited remotely if the attacker has authenticated access to the device.