Record status Published
Identifier year (not publication year) 2025
Source publication May 25, 2025
Source updated Jul 11, 2025
Imported by cveboard Oct 24, 2026
CNA source text (English) Netcore POWER13 Query String cgi-bin command injection
A vulnerability, which was classified as critical, was found in Netcore NBR1005GPEV2, B6V2, COVER5, NAP830, NAP930, NBR100V2, NBR200V2 and POWER13 up to 20250508. This affects an unknown part of the file /www/cgi-bin/ of the component Query String Handler. The manipulation leads to command injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Scoped product and version facts Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
NBR1005GPEV2
Vendor Netcore
Product NBR1005GPEV2
Platforms Unknown
Default status Unknown
NBR1005GPEV2 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 20250508 affectedUnavailable Unavailable Unavailable None listed
B6V2
Vendor Netcore
Product B6V2
Platforms Unknown
Default status Unknown
B6V2 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 20250508 affectedUnavailable Unavailable Unavailable None listed
COVER5
Vendor Netcore
Product COVER5
Platforms Unknown
Default status Unknown
COVER5 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 20250508 affectedUnavailable Unavailable Unavailable None listed
NAP830
Vendor Netcore
Product NAP830
Platforms Unknown
Default status Unknown
NAP830 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 20250508 affectedUnavailable Unavailable Unavailable None listed
NAP930
Vendor Netcore
Product NAP930
Platforms Unknown
Default status Unknown
NAP930 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 20250508 affectedUnavailable Unavailable Unavailable None listed
NBR100V2
Vendor Netcore
Product NBR100V2
Platforms Unknown
Default status Unknown
NBR100V2 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 20250508 affectedUnavailable Unavailable Unavailable None listed
NBR200V2
Vendor Netcore
Product NBR200V2
Platforms Unknown
Default status Unknown
NBR200V2 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 20250508 affectedUnavailable Unavailable Unavailable None listed
POWER13
Vendor Netcore
Product POWER13
Platforms Unknown
Default status Unknown
POWER13 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 20250508 affectedUnavailable Unavailable Unavailable None listed