CVE-2025-26412CWE-912

Undocumented Root Shell Access in SIMCom SIM7600G Modem

Medium · published June 11, 2025

CVSS v3.1
6.8
EPSS
0%
Percentile
18.3
In the wild
Unconfirmed
What it is

The SIMCom SIM7600G modem supports an undocumented AT command, which allows an attacker to execute system commands with root permission on the modem. An attacker needs either physical access or remote shell access to a device that interacts directly with the modem via AT commands.

The record
Technical detail
CVSS v3.1
6.8 · MEDIUM
Vector
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00271 · 18.3th percentile
Weakness
CWE-912 · Hidden Functionality
Published
2025-06-11T08:21Z
EPSS history
Timeline
  • 11 JUN 08:21Z
    Undocumented Root Shell Access in SIMCom SIM7600G Modem
    cvelistv5