CVE-2025-48415
Last modified
CVE-2025-48415 is a medium-severity vulnerability rated 6.2/10 on the CVSS scale. A USB backdoor feature can be triggered by attaching a USB drive that contains specially crafted "salia.ini" files. The .ini file can contain several "commands" that could be exploited by an attacker to export or modify the device configuration, enable an SSH backdoor or perform other administrative actions. EPSS estimates a 0.20% chance of exploitation in the next 30 days.
Description
A USB backdoor feature can be triggered by attaching a USB drive that contains specially crafted "salia.ini" files. The .ini file can contain several "commands" that could be exploited by an attacker to export or modify the device configuration, enable an SSH backdoor or perform other administrative actions. Ultimately, this backdoor also allows arbitrary execution of OS commands.
Metrics
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Weakness Enumeration
References
Timeline
- Published
- Last Modified
- Status
- Deferred
Frequently Asked Questions
What is CVE-2025-48415?
How severe is CVE-2025-48415?
How do I fix CVE-2025-48415?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2025
- CVE-2025-48396Arbitrary code execution is possible due to improper validat…8.3
- CVE-2025-48397The privileged user could log in without sufficient credenti…7.1
- CVE-2025-4840The inprosysmedia-likes-dislikes-post WordPress plugin throu…7.5
- CVE-2025-4841A vulnerability was found in D-Link DCS-932L 2.18.01 and cla…9.8
- CVE-2025-48413The `/etc/passwd` and `/etc/shadow` files reveal hard-coded …7.7
- CVE-2025-48414There are several scripts in the web interface that are acce…6.5
- CVE-2025-48416An OpenSSH daemon listens on TCP port 22. There is a hard-co…8.1
- CVE-2025-48417The certificate and private key used for providing transport…6.5
- CVE-2025-48418A hidden functionality vulnerability in Fortinet FortiAnalyz…7.2
- CVE-2025-48419Rejected reason: Not used
- CVE-2025-4842A vulnerability was found in D-Link DCS-932L 2.18.01. It has…9.8
- CVE-2025-48420Rejected reason: Not used
Are you affected by CVE-2025-48415?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST