CVE-2025-9585
MediumCVSS 6.3Exploitation Probability (EPSS)
Very high risk92th percentile - higher than 92% of all known CVEs
Summary
A vulnerability was determined in Comfast CF-N1 2.6.0 affecting the wifilith_delete_pic_file function of the file /usr/bin/webmgnt. Manipulation of the portal_delete_picname argument causes command injection. The attack is possible to be carried out remotely and the exploit has been publicly disclosed.
Risk Assessment
A remote attacker can execute arbitrary commands on the device, gaining control. The public availability of the exploit increases the risk of exploitation.
Recommendation
Update the firmware to the latest vendor version or restrict access to the management interface if no update is available.
Other vulnerabilities in Comfast CF-N1
See all- CVE-2025-9586Medium
A vulnerability was identified in Comfast CF-N1 2.6.0. This vulnerability affects the function wireless_device_dissoc of the file /usr/bin/webmgnt. Such manipulation of the argument mac leads to command injection. The attack may be performed from a remote location. The exploit is publicly available and might be used.
- CVE-2025-9584Medium
A vulnerability was found in Comfast CF-N1 2.6.0. Affected by this issue is the function update_interface_png of the file /usr/bin/webmgnt. The manipulation of the argument interface/display_name results in command injection. The attack can be executed remotely. The exploit has been made public and could be used.
- CVE-2025-9583Medium
A vulnerability has been found in Comfast CF-N1 2.6.0 affecting the ping_config function of the file /usr/bin/webmgnt. The manipulation leads to command injection. Remote exploitation is possible and the exploit has been disclosed to the public.
- CVE-2025-9582Medium
A flaw has been found in Comfast CF-N1 2.6.0 affecting the ntp_timezone function of the file /usr/bin/webmgnt. Manipulation of the timestr argument leads to command injection. The attack may be launched remotely and the exploit has been published.
- CVE-2025-9581Medium
A vulnerability was detected in Comfast CF-N1 2.6.0 affecting the multi_pppoe function of the file /usr/bin/webmgnt. Manipulation of the phy_interface argument results in command injection. The attack may be initiated remotely and the exploit is now public.
Original NVD description (English source)
A vulnerability was determined in Comfast CF-N1 2.6.0. This affects the function wifilith_delete_pic_file of the file /usr/bin/webmgnt. This manipulation of the argument portal_delete_picname causes command injection. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and may be utilized.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS