CVE-2025-53508
- State
- Published
- Severity
- 8.6 High
- Published
- Aug 29, 2025
- Updated
- Aug 29, 2025
- Reserved
- Jul 2, 2025
Description
Multiple products provided by iND Co.,Ltd contain an OS command injection vulnerability. If exploited, an arbitrary OS command may be executed and sensitive information may be obtained. As for the details of affected product names and versions, refer to the information under [Product Status].
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 8.6 High | CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N | jpcert |
| 3.0 | 7.2 High | CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H | jpcert |
Weaknesses
- CWE-78 Improper neutralization of special elements used in an OS command ('OS Command Injection')
Affected Products
| Product | Versions |
|---|---|
HL330-DLS (for module MC7700)iND Co.,Ltd |
|
HL330-DLS (for module MC7330)iND Co.,Ltd |
|
HL320-DLS (for module MC7700)iND Co.,Ltd |
|
HL320-DLS (for module MC7330)iND Co.,Ltd |
|
LM-100iND Co.,Ltd |
|
LM-200 (for module AMP570)iND Co.,Ltd |
|
LM-200 (for module EC25-J)iND Co.,Ltd |
|
L2X AssistiND Co.,Ltd |
|
L2X Assist-RS-AiND Co.,Ltd |
|
L2X Assist-RS-EiND Co.,Ltd |
|
F2L Assist-SS-AiND Co.,Ltd |
|
F2L Assist-SS-EiND Co.,Ltd |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.