CVE-2025-52377

Command injection vulnerability in Nexxt Solutions NCM-X1800 Mesh Router versions UV1.2.7 and below, allowing authenticated attackers to execute arbitrary commands on the device. The vulnerability is present in the web management interface's ping and traceroute functionality, specifically in the /web/um_ping_set.cgi endpoint. The application fails to properly sanitize user input in the `Ping_host_text` parameter before passing it to the underlying system command, allowing attackers to inject and execute arbitrary shell commands as the root user.

CVSS v3 5.4 MEDIUM

5.4^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 2.8 / Impact : 2.5

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact LOW

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://github.com/Vagebondcur/nexxt-solutions-NCM-X1800-exploits
https://github.com/Vagebondcur/nexxt-solutions-NCM-X1800-exploits/blob/main/CVE-2025-52377/writeup.md

Configurations

No configuration.

History

15 Jul 2025, 21:15

Type	Values Removed	Values Added
New CVE

Information

Published : 2025-07-15 15:15

Updated : 2025-07-15 21:15

NVD link : CVE-2025-52377

Mitre link : CVE-2025-52377

CVE.ORG link : CVE-2025-52377

JSON object : View

Products Affected

No product.

CWE

CWE-77

Improper Neutralization of Special Elements used in a Command ('Command Injection')

{"id": "CVE-2025-52377", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.4, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "LOW"}, "impactScore": 2.5, "exploitabilityScore": 2.8}]}, "published": "2025-07-15T15:15:24.990", "references": [{"url": "https://github.com/Vagebondcur/nexxt-solutions-NCM-X1800-exploits", "source": "cve@mitre.org"}, {"url": "https://github.com/Vagebondcur/nexxt-solutions-NCM-X1800-exploits/blob/main/CVE-2025-52377/writeup.md", "source": "cve@mitre.org"}], "vulnStatus": "Awaiting Analysis", "weaknesses": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "description": [{"lang": "en", "value": "CWE-77"}]}], "descriptions": [{"lang": "en", "value": "Command injection vulnerability in Nexxt Solutions NCM-X1800 Mesh Router versions UV1.2.7 and below, allowing authenticated attackers to execute arbitrary commands on the device. The vulnerability is present in the web management interface's ping and traceroute functionality, specifically in the /web/um_ping_set.cgi endpoint. The application fails to properly sanitize user input in the `Ping_host_text` parameter before passing it to the underlying system command, allowing attackers to inject and execute arbitrary shell commands as the root user."}, {"lang": "es", "value": "Vulnerabilidad de inyecci\u00f3n de comandos en el router de malla NCM-X1800 de Nexxt Solutions, versiones UV1.2.7 y anteriores, que permite a atacantes autenticados ejecutar comandos arbitrarios en el dispositivo. La vulnerabilidad se presenta en las funciones de ping y traceroute de la interfaz de administraci\u00f3n web, concretamente en el endpoint /web/um_ping_set.cgi. La aplicaci\u00f3n no depura correctamente la entrada del usuario en el par\u00e1metro `Ping_host_text` antes de pasarla al comando del sistema subyacente, lo que permite a los atacantes inyectar y ejecutar comandos de shell arbitrarios como usuario root."}], "lastModified": "2025-07-15T21:15:33.743", "sourceIdentifier": "cve@mitre.org"}