CVE-2025-3626

OS Command Injection via Config Upload in WebUI PUBLISHED

Description (CNA)

A remote attacker with administrator account can gain full control of the device due to improper neutralization of special elements used in an OS Command ('OS Command Injection') while uploading a config file via webUI.

Affected (CNA)

Vendor / product	Versions
Frauscher / FDS102	affected v2.8.0 before v2.13.3

CWE

CWE-78

References

https://certvde.com/en/advisories/VDE-2025-030

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.