VULNERABILITY INTELLIGENCE

CVE-2025-23237

CVSS score6.6 MEDIUM

EPSS probability0.93%

CISA KEVNot currently listed

Published2025-01-22

Last modified2026-06-17

Description

Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in UD-LT2 firmware Ver.1.00.008_SE and earlier. If a user logs in to CLI of the affected product, an arbitrary OS command may be executed.