VULNERABILITY INTELLIGENCE

CVE-2025-8890

CVSS score9.3 CRITICAL

EPSS probability1.40%

CISA KEVNot currently listed

Published2025-11-27

Last modified2026-10-18

Description

Firmware in SDMC NE6037 routers prior to version 7.1.12.2.44 has a network diagnostics tool vulnerable to a shell command injection attacks. In order to exploit this vulnerability, an attacker has to log in to the router's administrative portal, which by default is reachable only via LAN ports.