cveboard RSS feed

CVE-2025-5146

CVE.org · Published

Historical CVEsJSONAI instructions

Record status
Published
Identifier year (not publication year)
2025
Source publication
Source updated
Imported by cveboard
Source snapshot
cve_2026-10-24_midnight_baseline ·

Plain text

CNA source text (English)

Netcore NBR200V2 HTTP Header routerd passwd_set command injection

A vulnerability has been found in Netcore NBR1005GPEV2, B6V2, COVER5, NAP830, NAP930, NBR100V2 and NBR200V2 up to 20250508 and classified as critical. This vulnerability affects the function passwd_set of the file /usr/bin/routerd of the component HTTP Header Handler. The manipulation of the argument pwd leads to command injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

NBR1005GPEV2

Vendor
Netcore
Product
NBR1005GPEV2
Platforms
Unknown
Default status
Unknown
NBR1005GPEV2 · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
20250508affectedUnavailableUnavailableUnavailableNone listed

B6V2

Vendor
Netcore
Product
B6V2
Platforms
Unknown
Default status
Unknown
B6V2 · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
20250508affectedUnavailableUnavailableUnavailableNone listed

COVER5

Vendor
Netcore
Product
COVER5
Platforms
Unknown
Default status
Unknown
COVER5 · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
20250508affectedUnavailableUnavailableUnavailableNone listed

NAP830

Vendor
Netcore
Product
NAP830
Platforms
Unknown
Default status
Unknown
NAP830 · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
20250508affectedUnavailableUnavailableUnavailableNone listed

NAP930

Vendor
Netcore
Product
NAP930
Platforms
Unknown
Default status
Unknown
NAP930 · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
20250508affectedUnavailableUnavailableUnavailableNone listed

NBR100V2

Vendor
Netcore
Product
NBR100V2
Platforms
Unknown
Default status
Unknown
NBR100V2 · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
20250508affectedUnavailableUnavailableUnavailableNone listed

NBR200V2

Vendor
Netcore
Product
NBR200V2
Platforms
Unknown
Default status
Unknown
NBR200V2 · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
20250508affectedUnavailableUnavailableUnavailableNone listed