CVE-2025-67447: OS Command Injection
The network diagnosis (ping) module in Neterbit NW-431F Router 20241014-IR03 and before is vulnerable to OS command injection. The application does not properly sanitize user input in the IP address field before passing it to the system's ping command. An attacker can inject arbitrary OS commands, which will be executed with the privileges of the web server.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Disable the router's network diagnosis (ping) module or disable the IP address input on the web management interface if the feature is not required to prevent untrusted input reaching the system ping command.
Neterbit NW-431F Router - network diagnosis (ping) module network_diagnosis_ping = disabled - Compensating control
Restrict access to the router's web management interface (HTTP/HTTPS) to trusted IP addresses/networks using firewall rules, access control lists, or a management VLAN to prevent remote attackers from reaching the vulnerable ping function.
- Operational
Monitor the router and web server logs for signs of command injection or unexpected command execution. If compromise is suspected, isolate the device, perform recovery (factory reset or reimage), and rotate any credentials that may have been exposed.
Event History
Frequently Asked Questions
What is the severity of CVE-2025-67447?
CVE-2025-67447 has a critical severity rating of 9.8.
How can I fix CVE-2025-67447?
To fix CVE-2025-67447, update the Neterbit NW-431F Router firmware to the latest version that addresses the vulnerability.
What systems are affected by CVE-2025-67447?
CVE-2025-67447 affects the Neterbit NW-431F Router with firmware versions 20241014-IR03 and earlier.
What type of vulnerability is CVE-2025-67447?
CVE-2025-67447 is an OS command injection vulnerability that arises from improper input sanitization.
What could an attacker do with CVE-2025-67447?
An attacker could exploit CVE-2025-67447 to execute arbitrary OS commands on the vulnerable Neterbit NW-431F Router.