Skip to content
CVE PROGRAM SOURCE RECORD6.9 Medium

CVE-2025-41378

Injection vulnerability in Iridium Certus 700

Description

The SSID field is not parsed correctly and can be used to inject commands into the hostpad.conf file. This can be exploited by an attacker to extend his knowledge of the system and compromise other devices. The information is filtered by the logs function of the web panel.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Intellian Technologies Iridium Certus 700

Default version status: unaffected

  • 1.0.1affected

References