Description
An authenticated user can perform command injection via unsanitized input to the NetFax Server’s ping functionality via the /test.php endpoint.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| MICI Network | NetFax Server | < 3.0.1.0 | 3.0.1.0 |
Critical · 9.4
CVE-2025-48047
EUVD-2025-16371GHSA-xhw7-r59x-5m6x
MICI Network Co. Ltd. NetFax Server Command Injection
Published May 29, 2025 · Updated May 29, 2025 · Assigned by rapid7