CVE-2025-1036
HighCVSS 8.7Exploitation Probability (EPSS)
Elevated risk63th percentile - higher than 63% of all known CVEs
Summary
A command injection vulnerability exists in the “Logging” page of the web-based configuration utility. An authenticated user with low privileged network access for the configuration utility can execute arbitrary commands on the underlying OS to obtain root SSH access to the TropOS 4th Gen device.
Risk Assessment
The risk includes the possibility of gaining full control over the TropOS device by a low-privileged user, potentially leading to network compromise and device takeover.
Recommendation
Restrict access to the configuration utility and apply available security patches from the vendor.
Other vulnerabilities in TropOS 4th Gen
See all- CVE-2025-1038High
The “Diagnostics Tools” page of the TropOS 4th Gen web configuration utility does not properly validate user-controlled input, allowing an authenticated high-privileged user to inject commands into the device command shell. Injected commands can be used to execute SUID applications and gain root access.
- CVE-2025-1037High
On TropOS 4th Gen devices, an authenticated user able to run user-level shell commands can gain access via SSH to an unrestricted root shell. This is possible through abuse of a set of scripts and executables that allow certain commands to be run as root from an unprivileged context.
Original NVD description (English source)
Command injection vulnerability exists in the “Logging” page of the web-based configuration utility. An authenticated user with low privileged network access for the configuration utility can execute arbitrary commands on the underlying OS to obtain root SSH access to the TropOS 4th Gen device.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS