Skip to content
OpenAdvisories
Medium · 6.8 CVE-2025-3705 EUVD-2025-20201GHSA-qrmv-v4hm-rx2g

OS Command Injection via USB Config Load

Published Jul 7, 2025 · Updated Jul 7, 2025 · Assigned by CERTVDE

Description

A physical attacker with no privileges can gain full control of the affected device due to improper neutralization of special elements used in an OS Command ('OS Command Injection') when loading a config file from a USB drive.

Affected products

VendorProductAffectedFixed
Frauscher FDS102 0.0.0 – < v2.13.3 v2.13.3
Frauscher FDS101 0.0.0 – ≤ v1.4.25 —
Frauscher FDS-SNMP101 0.0.0 – ≤ v.2.3.9 —

Advisories 1

References