Description
An issue was discovered on FIRSTNUM JC21A-04 devices through 2.01ME/FN that allows authenticated attackers to execute arbitrary OS system commands with root privileges via crafted payloads to the xml_action.cgi?method= endpoint.
High · 7.4
CVE-2025-43979
EUVD-2025-23634GHSA-fmvc-vq6r-76m5
An issue was discovered on FIRSTNUM JC21A-04 devices through 2.01ME/FN that allows authenticated attackers to execute arbitrary OS system c…
Published Aug 5, 2025 · Updated Aug 5, 2025 · Assigned by mitre