Skip to content
OpenAdvisories
Critical · 9.8 CVE-2025-31715 EUVD-2025-25107GHSA-fpxh-3j3h-jq4p

In vowifi service, there is a possible command injection due to improper input validation. This could lead to remote escalation of privileg…

Published Aug 18, 2025 · Updated Aug 18, 2025 · Assigned by Unisoc

Description

In vowifi service, there is a possible command injection due to improper input validation. This could lead to remote escalation of privilege with no additional execution privileges needed.

Affected products

VendorProductAffectedFixed
Unisoc (Shanghai) Technologies SL8521E/SL8521ET/ SL8541E/UIS8141E/UWS6137/UWS6137E/UWS6151(E)/UWS6152 Mocor5/Andorid8.1/Andorid9 —

References