CVE-2025-44635
Last modified
CVE-2025-44635 is a critical-severity vulnerability rated 9.8/10 on the CVSS scale. There are multiple unauthorized remote command execution vulnerabilities in the H3C ER2200G2, ERG2-450W, ERG2-1200W, ERG2-1350W, NR1200W series routers before ERG2AW-MNW100-R1117; H3C ER3100G2, ER3200G2, ER3260G2, ER5100G2, ER5200G2, ER6300G2, ER8300G2, ER8300G2-X series routers before ERHMG2-MNW100-R1126; GR3200, GR5200, GR8300 and other series routers before MiniGR1B0V100R018L50; GR-1800AX before MiniGRW1B0V100R009L50; GR-3000AX before SWBRW1A0V100R007L50; and GR-5400AX before SWBRW1B0V100R009L50. Attackers can bypass authentication by including specially crafted text in the request URL or message header, and then inject arbitrary malicious commands into some fields related to ACL access control list and user group functions and execute to obtain the highest ROOT privileges of remote devices, thereby completely taking over the remote target devices.. EPSS estimates a 0.96% chance of exploitation in the next 30 days.
Description
There are multiple unauthorized remote command execution vulnerabilities in the H3C ER2200G2, ERG2-450W, ERG2-1200W, ERG2-1350W, NR1200W series routers before ERG2AW-MNW100-R1117; H3C ER3100G2, ER3200G2, ER3260G2, ER5100G2, ER5200G2, ER6300G2, ER8300G2, ER8300G2-X series routers before ERHMG2-MNW100-R1126; GR3200, GR5200, GR8300 and other series routers before MiniGR1B0V100R018L50; GR-1800AX before MiniGRW1B0V100R009L50; GR-3000AX before SWBRW1A0V100R007L50; and GR-5400AX before SWBRW1B0V100R009L50. Attackers can bypass authentication by including specially crafted text in the request URL or message header, and then inject arbitrary malicious commands into some fields related to ACL access control list and user group functions and execute to obtain the highest ROOT privileges of remote devices, thereby completely taking over the remote target devices.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness Enumeration
References
Timeline
- Published
- Last Modified
- Status
- Deferred
Frequently Asked Questions
What is CVE-2025-44635?
How severe is CVE-2025-44635?
How do I fix CVE-2025-44635?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2025
- CVE-2025-4461A vulnerability classified as problematic was found in TOTOL…5.4
- CVE-2025-44612Tinxy WiFi Lock Controller v1 RF was discovered to transmit …5.9
- CVE-2025-44614Tinxy WiFi Lock Controller v1 RF was discovered to store use…7.5
- CVE-2025-44619Tinxy WiFi Lock Controller v1 RF was discovered to be config…9.1
- CVE-2025-4462A vulnerability, which was classified as critical, has been …8.8
- CVE-2025-4463A vulnerability, which was classified as critical, was found…9.8
- CVE-2025-4464A vulnerability has been found in itsourcecode Gym Managemen…9.8
- CVE-2025-44643Certain Draytek products are affected by Insecure Configurat…8.6
- CVE-2025-44647In TRENDnet TEW-WLC100P 2.03b03, the i_dont_care_about_secur…7.3
- CVE-2025-44649In the configuration file of racoon in the TRENDnet TEW-WLC1…7.5
- CVE-2025-4465A vulnerability was found in itsourcecode Gym Management Sys…9.8
- CVE-2025-44650In Netgear R7000 V1.3.1.64_10.1.36 and EAX80 V1.0.1.70_1.0.2…7.5
Are you affected by CVE-2025-44635?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST