CVE-2025-63749
MediumCVSS 6.5Exploitation Probability (EPSS)
Elevated risk62th percentile - higher than 62% of all known CVEs
Summary
pnetlab 5.3.11 is vulnerable to command injection via the qemu_options parameter. The vulnerability allows injection and execution of arbitrary system commands.
Risk Assessment
An attacker could execute arbitrary commands on the system, potentially leading to environment compromise, data theft, or further privilege escalation.
Recommendation
Update pnetlab to a version later than 5.3.11 if a patch is available. Until then, restrict access to the management interface and validate the qemu_options parameter input.
Other vulnerabilities in pnetlab
See all- CVE-2024-51112Medium
An Open Redirect vulnerability in Pnetlab 5.3.11 allows an attacker to manipulate URLs to redirect users to arbitrary external websites via a crafted script.
- CVE-2024-51111Medium
Cross-Site Scripting (XSS) vulnerability in Pnetlab 5.3.11 allows an attacker to inject malicious scripts into a web page, which are executed in the context of the victim's browser.
Original NVD description (English source)
pnetlab 5.3.11 is vulnerable to Command Injection via the qemu_options parameter.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS