CVE-2025-22906
CriticalCVSS 9.8Exploitation Probability (EPSS)
High risk80th percentile - higher than 80% of all known CVEs
Summary
A command injection vulnerability was discovered in RE11S v1.11 via the L2TPUserName parameter at /goform/setWAN. An attacker can remotely execute arbitrary system commands.
Risk Assessment
The risk involves potential full device takeover by an unauthenticated attacker, leading to network confidentiality and integrity breaches.
Recommendation
Immediately update the RE11S firmware to the latest patched version if available. In the meantime, restrict administrative panel access to trusted IP addresses only.
Other vulnerabilities in RE11S
See all- CVE-2025-22916Critical
A stack overflow vulnerability was discovered in RE11S v1.11 via the pppUserName parameter in the formPPPoESetup function.
- CVE-2025-22912Critical
A command injection vulnerability was discovered in RE11S firmware version v1.11 within the /goform/formAccept component. An attacker can remotely execute arbitrary system commands.
- CVE-2025-22907Critical
A stack overflow vulnerability was discovered in RE11S v1.11 in the formWlSiteSurvey function via the selSSID parameter.
- CVE-2025-22905Critical
A command injection vulnerability was discovered in RE11S v1.11 via the command parameter at /goform/mp. An attacker can remotely execute arbitrary system commands.
- CVE-2025-22904Critical
A stack overflow vulnerability was discovered in RE11S v1.11 via the pptpUserName parameter in the setWAN function. This flaw could allow an attacker to execute arbitrary code or cause a denial of service.
Original NVD description (English source)
RE11S v1.11 was discovered to contain a command injection vulnerability via the L2TPUserName parameter at /goform/setWAN.