CVE-2025-5146

Netcore NBR200V2 HTTP Header routerd passwd_set command injection

State: Published
Severity: 5.3 Medium
Published: May 25, 2025
Updated: May 29, 2025
Reserved: May 24, 2025

Description

A vulnerability has been found in Netcore NBR1005GPEV2, B6V2, COVER5, NAP830, NAP930, NBR100V2 and NBR200V2 up to 20250508 and classified as critical. This vulnerability affects the function passwd_set of the file /usr/bin/routerd of the component HTTP Header Handler. The manipulation of the argument pwd leads to command injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

Scores

CVSS	Score	Vector	Source
4.0	5.3 Medium	CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N	VulDB
3.1	6.3 Medium	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L	VulDB
3.0	6.3 Medium	CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L	VulDB
2.0	6.5 Medium	AV:N/AC:L/Au:S/C:P/I:P/A:P	VulDB

Weaknesses

CWE-77 Command Injection
CWE-74 Injection

Affected Products

Product	Versions
NBR1005GPEV2Netcore	20250508Affected
B6V2Netcore	20250508Affected
COVER5Netcore	20250508Affected
NAP830Netcore	20250508Affected
NAP930Netcore	20250508Affected
NBR100V2Netcore	20250508Affected
NBR200V2Netcore	20250508Affected

References

VDB-310234 | Netcore NBR200V2 HTTP Header routerd passwd_set command injectionvdb-entrytechnical-description
VDB-310234 | CTI Indicators (IOB, IOC, TTP, IOA)signaturepermissions-required
Submit #573493 | Netcore NBR1005GPE; COVER5; NBR100; NBR200; B6; NAP930; NAP830 NBR1005GPEV2_V1.3.241107.015153; NBR100V2 V1.3.240614.030928; NBR200V2 V1.3.241127.071246; NAP930 V0.1.241010.141410; NAP830 V0. Command Injectionthird-party-advisory
https://github.com/Exploo0Osion/netcore_command_injection_2exploit

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.