CVE-2025-0457CWE-78

NetVision Information airPASS - OS Command Injection

High · published January 16, 2025

CVSS v3.1
8.8
EPSS
1%
Percentile
60.7
In the wild
Unconfirmed
What it is

The airPASS from NetVision Information has an OS Command Injection vulnerability, allowing remote attackers with regular privileges to inject and execute arbitrary OS commands.

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00943 · 60.7th percentile
Weakness
CWE-78 · Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Published
2025-01-16T01:37Z
EPSS history
Timeline
  • 16 JAN 01:37Z
    NetVision Information airPASS - OS Command Injection
    cvelistv5