CVE-2025-4635 | BDVDB-2026-280570 Detail
JCTAirpointer
Description#
A malicious user with administrative privileges in the web portal would be able to manipulate the Diagnostics module to obtain remote code execution on the local device as a low privileged user.
Impact#
CAPEC-88 OS Command Injection
Weaknesses#
- CWE-20 Improper Input Validation
References#
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.