Skip to content
CVE PROGRAM SOURCE RECORD8.6 High

CVE-2025-53508

Multiple products provided by iND Co.,Ltd contain an OS command injection vulnerability. If exploited, an arbitrary OS command may be executed and sensitive information may be obta

Description

Multiple products provided by iND Co.,Ltd contain an OS command injection vulnerability. If exploited, an arbitrary OS command may be executed and sensitive information may be obtained. As for the details of affected product names and versions, refer to the information under [Product Status].

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

iND Co.,Ltd HL330-DLS (for module MC7700)

  • firmware version 1.03 and earlieraffected

iND Co.,Ltd HL330-DLS (for module MC7330)

  • firmware version 2.02t and earlieraffected

iND Co.,Ltd HL320-DLS (for module MC7700)

  • firmware version 1.03 and earlieraffected

iND Co.,Ltd HL320-DLS (for module MC7330)

  • firmware version 2.02t and earlieraffected

iND Co.,Ltd LM-100

  • firmware version 1.02 and earlieraffected

iND Co.,Ltd LM-200 (for module AMP570)

  • firmware version 1.02 and earlieraffected

iND Co.,Ltd LM-200 (for module EC25-J)

  • firmware version 1.05e and earlieraffected

iND Co.,Ltd L2X Assist

  • firmware version 2.01 and earlieraffected

iND Co.,Ltd L2X Assist-RS-A

  • firmware version 1.11 and earlieraffected

iND Co.,Ltd L2X Assist-RS-E

  • firmware version 1.12 and earlieraffected

iND Co.,Ltd F2L Assist-SS-A

  • firmware version 1.03 and earlieraffected

iND Co.,Ltd F2L Assist-SS-E

  • firmware version 1.01 and earlieraffected

References