Skip to content
CVE PROGRAM SOURCE RECORD8.6 High

CVE-2025-4010

Arbitrary Command Injection in Netcom NTC-6200 & NWL-222

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
ONEKEY

Description

The Netcom NTC 6200 and NWL 222 series expose a web interface to be configured and set up by operators. Multiple endpoints of the web interface are vulnerable to arbitrary command injection and use insecure hardcoded passwords. Remote authenticated attackers can gain arbitrary code execution with elevated privileges.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Netcomm NTC 6200

Default version status: affected

  • 0affected

Netcomm NWL-222

Default version status: unaffected

  • 0 to < 2.1.21.1affected

References