Skip to content
CVE PROGRAM SOURCE RECORD6.8 Medium

CVE-2025-3705

OS Command Injection via USB Config Load

Description

A physical attacker with no privileges can gain full control of the affected device due to improper neutralization of special elements used in an OS Command ('OS Command Injection') when loading a config file from a USB drive.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Frauscher FDS102

Default version status: unaffected

  • 0.0.0 to < v2.13.3affected

Frauscher FDS101

Default version status: unaffected

  • 0.0.0 to ≤ v1.4.25affected

Frauscher FDS-SNMP101

Default version status: unaffected

  • 0.0.0 to ≤ v.2.3.9affected

References