Skip to content
CVE PROGRAM SOURCE RECORD6.8 Medium

CVE-2025-26412

Undocumented Root Shell Access in SIMCom SIM7600G Modem

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
SEC-VLab

Description

The SIMCom SIM7600G modem supports an undocumented AT command, which allows an attacker to execute system commands with root permission on the modem. An attacker needs either physical access or remote shell access to a device that interacts directly with the modem via AT commands.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SIMCom SIM7600G Modem

Default version status: unknown

  • LE20B03SIM7600M21-Aaffected

References