August 1, 2026

CVE Watchtower


← Back to CVE List

CVE-2025-54857NVD

Vulnerability Summary

Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in SkyBridge BASIC MB-A130 Ver.1.5.8 and earlier. If exploited, a remote unauthenticated attacker may execute arbitrary OS commands with root privileges.
Severity Level
CRITICAL(9.3)
Published Date
Sep 1, 2025
Last Modified
Sep 2, 2025
Exploitation Status
No confirmed exploitation yet
EPSS Score (30-Day)
Data Pending
Root Weakness (CWE)
CWE-78: OS Command Injection ↗
The software constructs all or part of an OS command using externally-influenced input, but does not properly neutralize special elements.
CVSS v4.0 Base Metrics
Attack VectorNetwork
Attack ComplexityLow
Privileges RequiredNone
User InteractionNone

External References