CVE-2025-57199

AVTECH SECURITY Corporation DGM1104 FullImg-1015-1004-1006-1003 was discovered to contain an authenticated command injection vulnerability in the…

High · published December 3, 2025

CVSS v3.1
8.8
EPSS
3%
Percentile
88.6
In the wild
Unconfirmed
What it is

⚡ An authenticated command injection vulnerability lurks here! AVTECH SECURITY's DGM1104 device lets attackers execute arbitrary commands through crafted input. How wild is that? 🔥 Think of it as a waiter who takes your order but instead of checking with the kitchen, just makes up whatever dish they want to serve — a recipe for disaster! 🍽️ An attacker could leverage this flaw to run any command on the device, which may lead to unauthorized control and potentially devastating consequences for your network. Imagine a compromised device spilling sensitive information or taking control of your entire security system!

Put simply

Think of it as a waiter who takes your order but instead of checking with the kitchen, just makes up whatever dish they want to serve — a recipe for disaster! 🍽️ The vulnerability in the NetFailDetectD binary allows an attacker to inject commands by sending specially crafted input, bypassing expected input validation. This means that if someone can authenticate, they can execute rogue commands on the system.

What to do

An attacker could leverage this flaw to run any command on the device, which may lead to unauthorized control and potentially devastating consequences for your network. Imagine a compromised device spilling sensitive information or taking control of your entire security system! To fix this issue, immediately update the firmware to the latest version provided by AVTECH SECURITY. Additionally, review user access levels to ensure only trusted users can authenticate to the device. Regularly monitor for any suspicious activities post-update. You've got this! With the right actions, you'll lock down your systems securely in no time. 🛡️

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.03329 · 88.6th percentile
Published
2025-12-03T00:00Z
EPSS history
Timeline
  • 03 DEC 00:00Z
    AVTECH SECURITY Corporation DGM1104 FullImg-1015-1004-1006-1003 was discovered to contain an authenticated command injection vulnerability in the…
    cvelistv5