CVE-2025-27078

Authenticated Remote Command Execution caused by Insecure Function Usage in System Binary

Medium · published April 8, 2025

CVSS v3.1
6.5
EPSS
0%
Percentile
38.3
In the wild
Unconfirmed
What it is

A vulnerability in a system binary of AOS-8 Instant and AOS-10 AP could allow an authenticated remote attacker to inject commands into the underlying operating system while using the CLI. Successful exploitation could lead to complete system compromise.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00453 · 38.3th percentile
Published
2025-04-08T15:57Z
EPSS history
Timeline
  • 08 APR 15:57Z
    Authenticated Remote Command Execution caused by Insecure Function Usage in System Binary
    cvelistv5