deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2025-5303
Published: 2025-06-07
Description: The LTL Freight Quotes – Freightview Edition, LTL Freight Quotes – Daylight Edition and LTL Freight Quotes – Day & Ross Edition plugins for WordPress are vulnerable to Stored Cross-Site Scripting via the expiry_date parameter in all versions up to, and including, 1.0.11, 2.2.6 and 2.1.10 respectively, due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 7.2 (HIGH)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/browser/ltl-freight-quotes-day-ross-edition/trunk/en-hit-to-update-plan.php#L29; https://plugins.trac.wordpress.org/browser/ltl-freight-quotes-daylight-edition/tags/2.2.6/en-hit-to-update-plan.php#L29; https://plugins.trac.wordpress.org/browser/ltl-freight-quotes-freightview-edition/tags/1.0.11/common/en-plans.php#L110
CVE: CVE-2024-9993
Published: 2025-06-07
Description: The Essential Addons for Elementor – Best Elementor Addon, Templates, Widgets, Kits & WooCommerce Builders plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the eael_event_details_text parameter of Event Calendar Widget in all versions up to, and including, 6.1.12 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/browser/essential-addons-for-elementor-lite/tags/6.0.7/includes/Elements/Event_Calendar.php#L3079; https://www.wordfence.com/threat-intel/vulnerabilities/id/a8de8a0b-0b70-4e8a-8cc4-06cc50d06a02?source=cve
CVE: CVE-2024-9994
Published: 2025-06-07
Description: The Essential Addons for Elementor – Best Elementor Addon, Templates, Widgets, Kits & WooCommerce Builders plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the eael_pricing_item_tooltip_content parameter of the Pricing Table Widget in all versions up to, and including, 6.1.12 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/browser/essential-addons-for-elementor-lite/tags/6.0.7/includes/Elements/Pricing_Table.php#L2164; https://www.wordfence.com/threat-intel/vulnerabilities/id/855ae993-d887-4416-9b3c-8274a90dce5f?source=cve
CVE: CVE-2025-5528
Published: 2025-06-07
Description: The Social Sharing Plugin – Sassy Social Share plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the heateor_mastodon_share parameter in all versions up to, and including, 3.3.75 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action, such as clicking on a link.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/browser/sassy-social-share/tags/3.3.75/public/class-sassy-social-share-public.php#L1481; https://www.wordfence.com/threat-intel/vulnerabilities/id/99e922ec-d40a-47e7-a10f-d966a351d182?source=cve
CVE: CVE-2025-5568
Published: 2025-06-07
Description: The WpEvently plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple parameters in all versions up to, and including, 4.4.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/magepeopleteam/mage-eventpress/commit/c6f8d[PII_REDACTED]d3eb7ed3ebe9a6ebc7795f144; https://plugins.trac.wordpress.org/changeset/3307484; https://wordpress.org/plugins/mage-eventpress/#developers
CVE: CVE-2025-49619
Published: 2025-06-07
Description: Skyvern through 0.1.85 is vulnerable to server-side template injection (SSTI) in the Prompt field of workflow blocks such as the Navigation v2 Block. Improper sanitization of Jinja2 template input allows authenticated users to inject crafted expressions that are evaluated on the server, leading to blind remote code execution (RCE).
CVSS Score: 8.5 (HIGH)
CWE: CWE-1336
References: https://cristibtz.github.io/posts/CVE-2025-49619/; https://github.com/Skyvern-AI/skyvern/commit/db856cd8433a204c8b45979c70a4da1e119d949d; https://www.exploit-db.com/exploits/52335
CVE: CVE-2025-5836
Published: 2025-06-07
Description: A vulnerability was found in Tenda AC9 15.03.02.13. It has been rated as critical. This issue affects the function formSetIptv of the file /goform/SetIPTVCfg of the component POST Request Handler. The manipulation of the argument list leads to command injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-74, CWE-77
References: https://candle-throne-f75.notion.site/Tenda-AC9-formSetIptv-209df0aa11858061ae2bcbf83918d034; https://vuldb.com/?ctiid.311579; https://vuldb.com/?id.311579
CVE: CVE-2025-5837
Published: 2025-06-07
Description: A vulnerability classified as critical has been found in PHPGurukul Employee Record Management System 1.3. Affected is an unknown function of the file /admin/allemployees.php. The manipulation of the argument delid leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-74, CWE-89, CWE-89
References: https://github.com/f1rstb100d/myCVE/issues/61; https://phpgurukul.com/; https://vuldb.com/?ctiid.311580
CVE: CVE-2025-5838
Published: 2025-06-07
Description: A vulnerability classified as critical was found in PHPGurukul Employee Record Management System 1.3. Affected by this vulnerability is an unknown functionality of the file /admin/adminprofile.php. The manipulation of the argument AdminName leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-74, CWE-89
References: https://github.com/f1rstb100d/myCVE/issues/62; https://phpgurukul.com/; https://vuldb.com/?ctiid.311581
CVE: CVE-2025-5839
Published: 2025-06-07
Description: A vulnerability, which was classified as critical, has been found in Tenda AC9 15.03.02.13. Affected by this issue is the function fromadvsetlanip of the file /goform/AdvSetLanip of the component POST Request Handler. The manipulation of the argument lanMask leads to buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119, CWE-120
References: https://candle-throne-f75.notion.site/Tenda-AC9-fromadvsetlanip-20adf0aa11858027b7c3c2f4e44bb867; https://vuldb.com/?ctiid.311582; https://vuldb.com/?id.311582
CVE: CVE-2025-5840
Published: 2025-06-07
Description: A vulnerability, which was classified as critical, was found in SourceCodester Client Database Management System 1.0. This affects an unknown part of the file /user_update_customer_order.php. The manipulation of the argument uploaded_file leads to unrestricted upload. It is possible to initiate the attack remotely.
CVSS Score: 7.3 (HIGH)
CWE: CWE-284, CWE-434
References: https://github.com/592833263/cve/issues/1; https://vuldb.com/?ctiid.311583; https://vuldb.com/?id.311583
CVE: CVE-2024-55585
Published: 2025-06-07
Description: In the moPS App through 1.8.618, all users can access administrative API endpoints without additional authentication, resulting in unrestricted read and write access, as demonstrated by /api/v1/users/resetpassword.
CWE: CWE-306
References: https://karatemuffin.it/data/2025_06_07_CVE-2024-55585_update.json; https://media.ccc.de/v/glt25-504-safety-ja-security-nein-analyse-eines-breit-eingesetzten-einsatzmanagmentsystems-; https://mops.eu
CVE: CVE-2025-5026
Published: 2025-06-07
Description: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE: CVE-2025-5097
Published: 2025-06-07
Description: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE: CVE-2025-5223
Published: 2025-06-07
Description: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE: CVE-2025-5242
Published: 2025-06-07
Description: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE: CVE-2025-38003
Published: 2025-06-08
Description: In the Linux kernel, the following vulnerability has been resolved:

can: bcm: add missing rcu read protection for procfs content

When the procfs content is generated for a bcm_op which is in the process
to be removed the procfs output might show unreliable data (UAF).

As the removal of bcm_op's is already implemented with rcu handling this
patch adds the missing rcu_read_lock() and makes sure the list entries
are properly removed under rcu protection.
CVSS Score: 5.5 (MEDIUM)
References: https://git.kernel.org/stable/c/0622846db728a5332b917c797c733e202c4620ae; https://git.kernel.org/stable/c/19f553a1ddf260da6570ed8f8d91a8c87f49b63a; https://git.kernel.org/stable/c/1f912f8484e9c4396378c39460bbea0af681f319
CVE: CVE-2025-38004
Published: 2025-06-08
Description: In the Linux kernel, the following vulnerability has been resolved:

can: bcm: add locking for bcm_op runtime updates

The CAN broadcast manager (CAN BCM) can send a sequence of CAN frames via
hrtimer. The content and also the length of the sequence can be changed
resp reduced at runtime where the 'currframe' counter is then set to zero.

Although this appeared to be a safe operation the updates of 'currframe'
can be triggered from user space and hrtimer context in bcm_can_tx().
Anderson Nascimento created a proof of concept that triggered a KASAN
slab-out-of-bounds read access which can be prevented with a spin_lock_bh.

At the rework of bcm_can_tx() the 'count' variable has been moved into
the protected section as this variable can be modified from both contexts
too.
CVSS Score: 7.1 (HIGH)
CWE: CWE-125
References: https://git.kernel.org/stable/c/2a437b86ac5a9893c902f30ef66815bf13587bf6; https://git.kernel.org/stable/c/7595de7bc56e0e52b74e56c90f7e247bf626d628; https://git.kernel.org/stable/c/76c84c3728178b2d38d5604e399dfe8b0752645e
CVE: CVE-2025-20063
Published: 2025-06-08
Description: in OpenHarmony v5.0.3 and prior versions allow a local attacker cause apps crash through type confusion.
CVSS Score: 3.3 (LOW)
CWE: CWE-843
References: https://gitee.com/openharmony/security/blob/master/zh/security-disclosure/2025/2025-06.md
CVE: CVE-2025-21082
Published: 2025-06-08
Description: in OpenHarmony v5.0.3 and prior versions allow a local attacker cause apps crash through type confusion.
CVSS Score: 3.3 (LOW)
CWE: CWE-843
References: https://gitee.com/openharmony/security/blob/master/zh/security-disclosure/2025/2025-06.md
CVE: CVE-2025-23235
Published: 2025-06-08
Description: in OpenHarmony v5.0.3 and prior versions allow a local attacker cause DOS through  out-of-bounds read.
CVSS Score: 3.3 (LOW)
CWE: CWE-125
References: https://gitee.com/openharmony/security/blob/master/zh/security-disclosure/2025/2025-06.md
CVE: CVE-2025-24493
Published: 2025-06-08
Description: in OpenHarmony v5.0.3 and prior versions allow a local attacker cause information leak through race condition.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-362
References: https://gitee.com/openharmony/security/blob/master/zh/security-disclosure/2025/2025-06.md
CVE: CVE-2025-25217
Published: 2025-06-08
Description: in OpenHarmony v5.0.3 and prior versions allow a local attacker case DOS through NULL pointer dereference.
CVSS Score: 3.3 (LOW)
CWE: CWE-476
References: https://gitee.com/openharmony/security/blob/master/zh/security-disclosure/2025/2025-06.md
CVE: CVE-2025-26691
Published: 2025-06-08
Description: in OpenHarmony v5.0.3 and prior versions allow a local attacker cause information leak through get permission.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-281
References: https://gitee.com/openharmony/security/blob/master/zh/security-disclosure/2025/2025-06.md
CVE: CVE-2025-26693
Published: 2025-06-08
Description: in OpenHarmony v5.0.3 and prior versions allow a local attacker cause information leak through get permission.
CVSS Score: 3.3 (LOW)
CWE: CWE-281
References: https://gitee.com/openharmony/security/blob/master/zh/security-disclosure/2025/2025-06.md
CVE: CVE-2025-27131
Published: 2025-06-08
Description: in OpenHarmony v5.0.3 and prior versions allow a local attacker cause DOS through improper input.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-20
References: https://gitee.com/openharmony/security/blob/master/zh/security-disclosure/2025/2025-06.md
CVE: CVE-2025-27242
Published: 2025-06-08
Description: in OpenHarmony v5.0.3 and prior versions allow a local attacker cause DOS through   improper input.
CVSS Score: 3.3 (LOW)
CWE: CWE-20
References: https://gitee.com/openharmony/security/blob/master/zh/security-disclosure/2025/2025-06.md
CVE: CVE-2025-27247
Published: 2025-06-08
Description: in OpenHarmony v5.0.3 and prior versions allow a local attacker cause information leak through get permission.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-281
References: https://gitee.com/openharmony/security/blob/master/zh/security-disclosure/2025/2025-06.md
CVE: CVE-2025-27563
Published: 2025-06-08
Description: in OpenHarmony v5.0.3 and prior versions allow a local attacker cause information leak through get permission.
CVSS Score: 3.3 (LOW)
CWE: CWE-281
References: https://gitee.com/openharmony/security/blob/master/zh/security-disclosure/2025/2025-06.md
CVE: CVE-2025-5847
Published: 2025-06-08
Description: A vulnerability has been found in Tenda AC9 15.03.02.13 and classified as critical. Affected by this vulnerability is the function formSetSafeWanWebMan of the file /goform/SetRemoteWebCfg of the component HTTP POST Request Handler. The manipulation of the argument remoteIp leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119, CWE-121, CWE-787
References: https://candle-throne-f75.notion.site/Tenda-AC9-formSetSafeWanWebMan-20adf0aa118580a29e80cef9109c947a; https://vuldb.com/?ctiid.311593; https://vuldb.com/?id.311593
CVE: CVE-2025-32455
Published: 2025-06-08
Description: The Quantenna Wi-Fi chipset ships with a local control script, router_command.sh (in the run_cmd argument), that is vulnerable to command injection. This is an instance of CWE-88, "Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')," and is estimated as a CVSS 7.7 (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N).

This issue affects Quantenna Wi-Fi chipset through version 8.0.0.28 of the latest SDK, and appears to be unpatched at the time of this CVE record's first publishing, though the vendor has released a best practices guide for implementors of this chipset.
CVSS Score: 7.7 (HIGH)
CWE: CWE-88
References: https://community.onsemi.com/s/article/QCS-Quantenna-Wi-Fi-product-support-and-security-best-practices; https://takeonme.org/cves/cve-2025-3460
CVE: CVE-2025-32456
Published: 2025-06-08
Description: The Quantenna Wi-Fi chipset ships with a local control script, router_command.sh (in the put_file_to_qtn argument), that is vulnerable to command injection. This is an instance of CWE-88, "Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')," and is estimated as a CVSS 7.7 (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N).
This issue affects Quantenna Wi-Fi chipset through version 8.0.0.28 of the latest SDK, and appears to be unpatched at the time of this CVE record's first publishing, though the vendor has released a best practices guide for implementors of this chipset.
CVSS Score: 7.7 (HIGH)
CWE: CWE-88
References: https://community.onsemi.com/s/article/QCS-Quantenna-Wi-Fi-product-support-and-security-best-practices; https://takeonme.org/cves/cve-2025-3460
CVE: CVE-2025-32457
Published: 2025-06-08
Description: The Quantenna Wi-Fi chipset ships with a local control script, router_command.sh (in the get_file_from_qtn argument), that is vulnerable to command injection. This is an instance of CWE-88, "Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')," and is estimated as a CVSS 7.7 (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N).
This issue affects Quantenna Wi-Fi chipset through version 8.0.0.28 of the latest SDK, and appears to be unpatched at the time of this CVE record's first publishing, though the vendor has released a best practices guide for implementors of this chipset.
CVSS Score: 7.7 (HIGH)
CWE: CWE-88
References: https://community.onsemi.com/s/article/QCS-Quantenna-Wi-Fi-product-support-and-security-best-practices; https://takeonme.org/cves/cve-2025-3460
CVE: CVE-2025-32458
Published: 2025-06-08
Description: The Quantenna Wi-Fi chipset ships with a local control script, router_command.sh (in the get_syslog_from_qtn argument), that is vulnerable to command injection. This is an instance of CWE-88, "Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')," and is estimated as a CVSS 7.7 (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N).
This issue affects Quantenna Wi-Fi chipset through version 8.0.0.28 of the latest SDK, and appears to be unpatched at the time of this CVE record's first publishing, though the vendor has released a best practices guide for implementors of this chipset.
CVSS Score: 7.7 (HIGH)
CWE: CWE-88
References: https://community.onsemi.com/s/article/QCS-Quantenna-Wi-Fi-product-support-and-security-best-practices; https://takeonme.org/cves/cve-2025-3460
CVE: CVE-2025-32459
Published: 2025-06-08
Description: The Quantenna Wi-Fi chipset ships with a local control script, router_command.sh (in the sync_time argument), that is vulnerable to command injection. This is an instance of CWE-88, "Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')," and is estimated as a CVSS 7.7 (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N).

This issue affects Quantenna Wi-Fi chipset through version 8.0.0.28 of the latest SDK, and appears to be unpatched at the time of this CVE record's first publishing, though the vendor has released a best practices guide for implementors of this chipset.
CVSS Score: 7.7 (HIGH)
CWE: CWE-88
References: https://community.onsemi.com/s/article/QCS-Quantenna-Wi-Fi-product-support-and-security-best-practices; https://takeonme.org/cves/cve-2025-3460
CVE: CVE-2025-35004
Published: 2025-06-08
Description: Products that incorporate the Microhard BulletLTE-NA2 and IPn4Gii-NA2 are vulnerable to a post-authentication command injection issue in the AT+MFIP command that can lead to privilege escalation. This is an instance of CWE-88, "Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')," and is estimated as a CVSS 7.1 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N). This issue has not been generally fixed at the time of this CVE record's first publishing.
CVSS Score: 7.1 (HIGH)
CWE: CWE-88
References: https://support.microhardcorp.com/portal/en/kb/articles/ipn4gii-bullet-lte-firmware; https://takeonme.org/cves/cve-2025-35004/; https://www.microhardcorp.com/BulletLTE-NA2.php
CVE: CVE-2025-35005
Published: 2025-06-08
Description: Products that incorporate the Microhard BulletLTE-NA2 and IPn4Gii-NA2 are vulnerable to a post-authentication command injection issue in the AT+MFMAC command that can lead to privilege escalation. This is an instance of CWE-88, "Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')," and is estimated as a CVSS 7.1 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N). This issue has not been generally fixed at the time of this CVE record's first publishing.
CVSS Score: 7.1 (HIGH)
CWE: CWE-88
References: https://support.microhardcorp.com/portal/en/kb/articles/ipn4gii-bullet-lte-firmware; https://takeonme.org/cves/cve-2025-35005/; https://www.microhardcorp.com/BulletLTE-NA2.php
CVE: CVE-2025-35006
Published: 2025-06-08
Description: Products that incorporate the Microhard BulletLTE-NA2 and IPn4Gii-NA2 are vulnerable to a post-authentication command injection issue in the AT+MFPORTFWD command that can lead to privilege escalation. This is an instance of CWE-88, "Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')," and is estimated as a CVSS 7.1 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N). This issue has not been generally fixed at the time of this CVE record's first publishing.
CVSS Score: 7.1 (HIGH)
CWE: CWE-88
References: https://support.microhardcorp.com/portal/en/kb/articles/ipn4gii-bullet-lte-firmware; https://takeonme.org/cves/cve-2025-35006/; https://www.microhardcorp.com/BulletLTE-NA2.php
CVE: CVE-2025-35007
Published: 2025-06-08
Description: Products that incorporate the Microhard BulletLTE-NA2 and IPn4Gii-NA2 are vulnerable to a post-authentication command injection issue in the AT+MFRULE command that can lead to privilege escalation. This is an instance of CWE-88, "Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')," and is estimated as a CVSS 7.1 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N). This issue has not been generally fixed at the time of this CVE record's first publishing.
CVSS Score: 7.1 (HIGH)
CWE: CWE-88
References: https://support.microhardcorp.com/portal/en/kb/articles/ipn4gii-bullet-lte-firmware; https://takeonme.org/cves/cve-2025-35007/; https://www.microhardcorp.com/BulletLTE-NA2.php
CVE: CVE-2025-35008
Published: 2025-06-08
Description: Products that incorporate the Microhard BulletLTE-NA2 and IPn4Gii-NA2 are vulnerable to a post-authentication command injection issue in the AT+MMNAME command that can lead to privilege escalation. This is an instance of CWE-88, "Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')," and is estimated as a CVSS 7.1 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N). This issue has not been generally fixed at the time of this CVE record's first publishing.
CVSS Score: 7.1 (HIGH)
CWE: CWE-88
References: https://support.microhardcorp.com/portal/en/kb/articles/ipn4gii-bullet-lte-firmware; https://takeonme.org/cves/cve-2025-35008/; https://www.microhardcorp.com/BulletLTE-NA2.php
CVE: CVE-2025-35009
Published: 2025-06-08
Description: Products that incorporate the Microhard BulletLTE-NA2 and IPn4Gii-NA2 are vulnerable to a post-authentication command injection issue in the AT+MNNETSP command that can lead to privilege escalation. This is an instance of CWE-88, "Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')," and is estimated as a CVSS 7.1 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N). This issue has not been generally fixed at the time of this CVE record's first publishing.
CVSS Score: 7.1 (HIGH)
CWE: CWE-88
References: https://support.microhardcorp.com/portal/en/kb/articles/ipn4gii-bullet-lte-firmware; https://takeonme.org/cves/cve-2025-35009/; https://www.microhardcorp.com/BulletLTE-NA2.php
CVE: CVE-2025-35010
Published: 2025-06-08
Description: Products that incorporate the Microhard BulletLTE-NA2 and IPn4Gii-NA2 are vulnerable to a post-authentication command injection issue in the AT+MNPINGTM command that can lead to privilege escalation. This is an instance of CWE-88, "Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')," and is estimated as a CVSS 7.1 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N). This issue has not been generally fixed at the time of this CVE record's first publishing.
CVSS Score: 7.1 (HIGH)
CWE: CWE-88
References: https://support.microhardcorp.com/portal/en/kb/articles/ipn4gii-bullet-lte-firmware; https://takeonme.org/cves/cve-2025-35010/; https://www.microhardcorp.com/BulletLTE-NA2.php