CVE-2025-54763CWE-78command-injection

CVE-2025-54763

High · published October 31, 2025

CVSS v3.1
7.2
EPSS
1%
Percentile
68.7
In the wild
Unconfirmed
What it is

⚡ A web login is all it takes to unleash OS command chaos! With an injection vulnerability in FutureNet MA and IP-K series products, your system could be at the mercy of malicious commands. 🔥 Think of this vulnerability like a restaurant where a customer can place any order directly in the kitchen without the chef checking — if they wanted to, they could demand a dish that sets off the fire alarms! This flaw allows a logged-in user to execute any OS command they fancy, putting the entire system at risk. An attacker could gain full control, access sensitive data, or even disable services — absolutely devastating if left unchecked!

Put simply

Think of this vulnerability like a restaurant where a customer can place any order directly in the kitchen without the chef checking — if they wanted to, they could demand a dish that sets off the fire alarms! The OS command injection vulnerability in FutureNet MA and IP-K series enables an authenticated user to run arbitrary commands on the underlying operating system through the web interface, bypassing intended security measures.

What to do

This flaw allows a logged-in user to execute any OS command they fancy, putting the entire system at risk. An attacker could gain full control, access sensitive data, or even disable services — absolutely devastating if left unchecked! To protect your systems, patch to the latest version as soon as it's available. Additionally, review user permissions and implement strict access controls to limit who can log in to the Web UI. Regularly audit your systems for similar vulnerabilities! You've got this! With these steps, you can lock down your system and keep your data safe! 🛡️

The record
Technical detail
CVSS v3.1
7.2 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01230 · 68.7th percentile
Weakness
CWE-78 · Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Published
2025-10-31T10:15Z
References (2)
EPSS history
Timeline
  • 31 OCT 05:55Z
    FutureNet MA and IP-K series provided by Century Systems Co., Ltd
    cvelistv5