← CVE Intelligence

CVE-2025-41378

Injection vulnerability in Iridium Certus 700 PUBLISHED

Description (CNA)

The SSID field is not parsed correctly and can be used to inject commands into the hostpad.conf file. This can be exploited by an attacker to extend his knowledge of the system and compromise other devices. The information is filtered by the logs function of the web panel.

Affected (CNA)

Vendor / productVersions
Intellian Technologies / Iridium Certus 700affected 1.0.1

CWE

CWE-20

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.