Skip to content
CVE PROGRAM SOURCE RECORD6.9 Medium

CVE-2025-0224

Provision-ISR SH-4050A-2 server.js information disclosure

Description

A vulnerability was found in Provision-ISR SH-4050A-2, SH-4100A-2L(MM), SH-8100A-2L(MM), SH-16200A-2(1U), SH-16200A-5(1U) and NVR5-8200PX up to 20241220. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /server.js. The manipulation leads to information disclosure. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Provision-ISR SH-4050A-2

  • 20241220affected

Provision-ISR SH-4100A-2L(MM)

  • 20241220affected

Provision-ISR SH-8100A-2L(MM)

  • 20241220affected

Provision-ISR SH-16200A-2(1U)

  • 20241220affected

Provision-ISR SH-16200A-5(1U)

  • 20241220affected

Provision-ISR NVR5-8200PX

  • 20241220affected

References