How severe is CVE-2025-2071?

This vulnerability has a severity rating of CRITICAL with a CVSS score of N/A out of 10.

What type of vulnerability is CVE-2025-2071?

This is classified as CWE-78, which is a common weakness in software security.

CVE-2025-2071

CRITICAL Year: 2025

Weakness Type

CWE-78

View all →

Vulnerability Description

A critical OS Command Injection vulnerability has been identified in the FAST LTA Silent Brick WebUI, allowing remote attackers to execute arbitrary operating system commands via specially crafted input. This vulnerability arises due to improper handling of untrusted input, which is passed directly to system-level commands without adequate sanitization or validation. Successful exploitation could allow attackers to execute arbitrary commands on the affected system, potentially resulting in unauthorized access, data leakage, or full system compromise. Affected WebUI parameters are "hd" and "pi".

CVE-2015-7426

CRITICAL

CVSS:10.0(Critical)

The Data Protection extension in the VMware GUI in IBM Tivoli Storage Manager for Virtual Environments: Data Protection for VMware (aka Spectrum Protect for Virtual Environments) 7.1 before 7.1.3.0 an...

CWE-782015

CVE-2016-10043

CRITICAL

CVSS:10.0(Critical)

An issue was discovered in Radisys MRF Web Panel (SWMS) 9.0.1. The MSM_MACRO_NAME POST parameter in /swms/ms.cgi was discovered to be vulnerable to OS command injection attacks. It is possible to use ...

CWE-782016

CVE-2019-19897

CRITICAL

CVSS:10.0(Critical)

In IXP EasyInstall 6.2.13723, there is Remote Code Execution via the Agent Service. An unauthenticated attacker can communicate with the Agent Service over TCP port 20051, and execute code in the NT A...

CWE-782019

CVE-2019-4202

CRITICAL

CVSS:10.0(Critical)

IBM API Connect 5.0.0.0 and 5.0.8.6 Developer Portal is vulnerable to command injection. An attacker with a specially crafted request can run arbitrary code on the server and gain complete access to t...

CWE-782019

CVE-2019-5127

CRITICAL

CVSS:10.0(Critical)

A command injection have been found in YouPHPTube Encoder. A successful attack could allow an attacker to compromise the server. Exploitable unauthenticated command injections exist in YouPHPTube Enco...

CWE-782019