CVE-2025-11787

Описание

Command injection vulnerability in the operating system in Circutor SGE-PLC1000/SGE-PLC50 v9.0.2 through the 'GetDNS()', 'CheckPing()' and 'TraceRoute()' functions.

Затрагиваемое ПО

Circutor Sge-plc1000 firmwareCircutor Sge-plc1000Circutor Sge-plc50 firmwareCircutor Sge-plc50

CVSS

Балл	8.8 — высокая
Вектор	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Источники

https://www.incibe.es/en/incibe-cert/notices/aviso-sci/multiple-vulnerabilities-circutor-products-0