VULNERABILITY INTELLIGENCE

CVE-2025-25504

CVSS score6.5 MEDIUM

EPSS probability0.38%

CISA KEVNot currently listed

Published2025-05-05

Last modified2026-07-05

Description

An issue in the /usr/local/bin/jncs.sh script of Gefen WebFWC (In AV over IP products) v1.85h, v1.86v, and v1.70 allows attackers with network access to connect to the device over TCP port 4444 without authentication and execute arbitrary commands with root privileges.