CVE-2025-69755: OS Command Injection
An issue in Neterbit NW-431F Router vNW-431F-20241014-IR03 allows a remote attacker to obtain sensitive information and execute arbitrary code via a crafted command to the atcommand.asp interface
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Disable access to the at_command.asp management endpoint or restrict it so only specific trusted IP addresses or networks can access it; do not expose at_command.asp to the WAN.
Neterbit NW-431F Router at_command.asp remote access = disabled or restricted to trusted IPs - Compensating control
Block or filter requests to /at_command.asp at the network perimeter (firewall, WAF) and restrict the router management interface to trusted management networks only (e.g., via ACLs or VLAN isolation).
Event History
Frequently Asked Questions
What is the severity of CVE-2025-69755?
CVE-2025-69755 has a high severity rating of 8.2.
How do I fix CVE-2025-69755?
To address CVE-2025-69755, update the Neterbit NW-431F Router to the latest firmware version that resolves this vulnerability.
What type of vulnerability is CVE-2025-69755?
CVE-2025-69755 is categorized as an OS Command Injection vulnerability and an Infoleak.
What can an attacker do with CVE-2025-69755?
An attacker can exploit CVE-2025-69755 to obtain sensitive information and execute arbitrary code on the router.
Which product is affected by CVE-2025-69755?
CVE-2025-69755 affects the Neterbit NW-431F Router with the firmware version vNW-431F-20241014-IR03.