Dashboard / CVE-2025-57293

CVE-2025-57293

HIGH
MEDIUM Priority: 0.15 BB Relevance: 68/100
Published: 2025-09-18 Modified: 2026-11-05 First seen: 2026-11-05 Status: active

Attack Surface

Network Low Complexity No Auth Conf. Impact Integ. Impact

CVSS Vector Breakdown

AV: Network
AC: Low
PR: None
UI: Required
S: Unchanged
C: High
I: High
A: High

Description

A command injection vulnerability in COMFAST CF-XR11 (firmware V2.7.2) exists in the multi_pppoe API, processed by the sub_423930 function in /usr/bin/webmgnt. The phy_interface parameter is not sanitized, allowing attackers to inject arbitrary commands via a POST request to /cgi-bin/mbox-config?method=SET&section=multi_pppoe. When the action parameter is set to "one_click_redial", the unsanitized phy_interface is used in a system() call, enabling execution of malicious commands. This can lead to unauthorized access to sensitive files, execution of arbitrary code, or full device compromise.

Weakness Classification (1)

Affected Software (1)

VendorProductVersion
comfast cf-xr11_firmware 2.7.2

References & Advisories (1)

Bug Bounty Relevance

68 / 100
✓ Network accessible
✓ No authentication
✓ Low complexity

CVSS Score

8.8 / 10.0 v3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS — Exploitation Probability

1.68%
Raw Score 0.016790
Percentile 77.3%
Date 2026-11-13

EPSS Trend

2026-11-13
0.01679
2026-11-12
0.01679
2026-11-10
0.01679
2026-11-09
0.01679
2026-11-08
0.01679
2026-11-07
0.01679
2026-11-06
0.01679
2026-11-05
0.01679

Intelligence Sources

nvd ref →

External Links