CVE-2025-14213 — Cato's Socket WebUI is vulnerable to OS Command Injection

CVE-2025-14213

Cato's Socket WebUI is vulnerable to OS Command Injection PUBLISHED

Description (CNA)

Cato Networks’ Socket versions prior to 25 contain a command injection vulnerability that allows an authenticated attacker with access to the Socket web interface (UI) to execute arbitrary operating system commands as the root user on the Socket’s internal system.

Affected (CNA)

Vendor / product	Versions
Cato Networks / Socket	affected 24 and below

CWE

CWE-78, CWE-20

References

https://support.catonetworks.com/hc/en-us/articles/33184937283357-CVE-2025-14213-Socket-WebUI-OS-Command-Injection

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.