CVE-2025-9586
MediumCVSS 6.3Exploitation Probability (EPSS)
Very high risk95th percentile - higher than 95% of all known CVEs
Summary
A vulnerability was identified in Comfast CF-N1 2.6.0. This vulnerability affects the function wireless_device_dissoc of the file /usr/bin/webmgnt. Such manipulation of the argument mac leads to command injection. The attack may be performed from a remote location. The exploit is publicly available and might be used.
Risk Assessment
A remote attacker can execute arbitrary commands on the device, potentially leading to full device compromise and network breach.
Recommendation
Update the Comfast CF-N1 firmware if a patch is available. Restrict access to the management interface and monitor logs for suspicious activity.
Other vulnerabilities in Comfast CF-N1
See all- CVE-2025-9585Medium
A vulnerability was determined in Comfast CF-N1 2.6.0 affecting the wifilith_delete_pic_file function of the file /usr/bin/webmgnt. Manipulation of the portal_delete_picname argument causes command injection. The attack is possible to be carried out remotely and the exploit has been publicly disclosed.
- CVE-2025-9584Medium
A vulnerability was found in Comfast CF-N1 2.6.0. Affected by this issue is the function update_interface_png of the file /usr/bin/webmgnt. The manipulation of the argument interface/display_name results in command injection. The attack can be executed remotely. The exploit has been made public and could be used.
- CVE-2025-9583Medium
A vulnerability has been found in Comfast CF-N1 2.6.0 affecting the ping_config function of the file /usr/bin/webmgnt. The manipulation leads to command injection. Remote exploitation is possible and the exploit has been disclosed to the public.
- CVE-2025-9582Medium
A flaw has been found in Comfast CF-N1 2.6.0 affecting the ntp_timezone function of the file /usr/bin/webmgnt. Manipulation of the timestr argument leads to command injection. The attack may be launched remotely and the exploit has been published.
- CVE-2025-9581Medium
A vulnerability was detected in Comfast CF-N1 2.6.0 affecting the multi_pppoe function of the file /usr/bin/webmgnt. Manipulation of the phy_interface argument results in command injection. The attack may be initiated remotely and the exploit is now public.
Original NVD description (English source)
A vulnerability was identified in Comfast CF-N1 2.6.0. This vulnerability affects the function wireless_device_dissoc of the file /usr/bin/webmgnt. Such manipulation of the argument mac leads to command injection. The attack may be performed from a remote location. The exploit is publicly available and might be used.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS