CVE-2025-65883
Last modified
CVE-2025-65883 is a high-severity vulnerability rated 8.4/10 on the CVSS scale. A vulnerability has been identified in Genexis Platinum P4410 router (Firmware P4410-V2–1.41) that allows a local network attacker to achieve Remote Code Execution (RCE) with root privileges. The issue occurs due to improper session invalidation after administrator logout. EPSS estimates a 0.34% chance of exploitation in the next 30 days.
Description
A vulnerability has been identified in Genexis Platinum P4410 router (Firmware P4410-V2–1.41) that allows a local network attacker to achieve Remote Code Execution (RCE) with root privileges. The issue occurs due to improper session invalidation after administrator logout. When an administrator logs out, the session token remains valid. An attacker on the local network can reuse this stale token to send crafted requests via the router’s diagnostic endpoint, resulting in command execution as root.
Metrics
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Genexis | Platinum 4410 Firmware | p4410-v2-1.41 |
References
- https://0xw41th.medium.com/my-first-cve-cve-2025-65883-remote-code-execution-in-a-genexis-router-0c35749a99bdExploit, Third Party Advisory
Timeline
- Published
- Last Modified
- Status
- Analyzed
Frequently Asked Questions
What is CVE-2025-65883?
How severe is CVE-2025-65883?
How do I fix CVE-2025-65883?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2025
- CVE-2025-65877Lvzhou CMS before commit c4ea0eb9cab5f6739b2c87e77d9ef304017…7.5
- CVE-2025-65878The warehouse management system version 1.2 contains an arbi…7.5
- CVE-2025-65879Warehouse Management System 1.2 contains an authenticated ar…8.1
- CVE-2025-6588The FunnelCockpit plugin for WordPress is vulnerable to Refl…6.1
- CVE-2025-65881Sourcecodester Zoo Management System v1.0 is vulnerable to C…6.1
- CVE-2025-65882An issue was discovered in openmptcprouter thru 0.64 in file…9.8
- CVE-2025-65885An issue was discovered in the Delight Custom Firmware (CFW)…5.1
- CVE-2025-65886A shape mismatch vulnerability in OneFlow v0.9.0 allows atta…7.5
- CVE-2025-65887A division-by-zero vulnerability in the flow.floor_divide() …6.5
- CVE-2025-65888A dimension validation flaw in the flow.empty() component of…7.5
- CVE-2025-65889A type validation flaw in the flow.dstack() component of One…7.5
- CVE-2025-6589Vulnerability in Wikimedia Foundation MediaWiki. This vulner…2.1
Are you affected by CVE-2025-65883?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST