CVE-2025-9584: Comfast CF-N1 webmgnt update_interface_png command injection

Published Aug 28, 2025

Updated

A vulnerability was found in Comfast CF-N1 2.6.0. Affected by this issue is the function updateinterfacepng of the file /usr/bin/webmgnt. The manipulation of the argument interface/displayname results in command injection. The attack can be executed remotely. The exploit has been made public and could be used.

Affected Software

3 affected components

Comfast CF-N1

All of the following

Comfast Cf-n1 Firmware=2.6.0

Comfast CF-N1=2

Event History

Aug 28, 2025

CVE Published

via MITRE·08:02 PM

Data Sourced

via MITRE·08:02 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·08:15 PM

DescriptionSeverityWeaknessAffected Software

Feb 28, 57989

Event

via FIRST·05:22 AM

Frequently Asked Questions

What is the severity of CVE-2025-9584?

CVE-2025-9584 has been classified as a high severity vulnerability due to its potential for remote command injection.

How do I fix CVE-2025-9584?

To fix CVE-2025-9584, it is recommended to update the Comfast CF-N1 to the latest firmware version that addresses this vulnerability.

What systems are affected by CVE-2025-9584?

CVE-2025-9584 specifically affects the Comfast CF-N1 running version 2.6.0.

What type of attack is possible with CVE-2025-9584?

CVE-2025-9584 allows for a remote command injection attack through the manipulation of the interface display name.

Is any user authentication required to exploit CVE-2025-9584?

CVE-2025-9584 can be exploited remotely without the need for user authentication.