Skip to content
OpenAdvisories
Critical · 9.1 CVE-2025-3626 EUVD-2025-20202GHSA-43fm-wrjr-xr6x

OS Command Injection via Config Upload in WebUI

Published Jul 7, 2025 · Updated Jul 7, 2025 · Assigned by CERTVDE

Description

A remote attacker with administrator account can gain full control of the device due to improper neutralization of special elements used in an OS Command ('OS Command Injection') while uploading a config file via webUI.

Affected products

VendorProductAffectedFixed
Frauscher FDS102 v2.8.0 – < v2.13.3 v2.13.3

Advisories 1

References