CVE-2025-26412
Undocumented Root Shell Access in SIMCom SIM7600G Modem
- State
- Published
- Severity
- 6.8 Medium
- Published
- Jun 11, 2025
- Updated
- Jun 18, 2025
- Reserved
- Feb 10, 2025
Description
The SIMCom SIM7600G modem supports an undocumented AT command, which allows an attacker to execute system commands with root permission on the modem. An attacker needs either physical access or remote shell access to a device that interacts directly with the modem via AT commands.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 6.8 Medium | CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H | CISA-ADP |
Weaknesses
- CWE-912 Hidden Functionality
Affected Products
| Product | Versions |
|---|---|
SIM7600G ModemSIMCom |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.