CVE-2025-34082

🗓️ 03 Jul 2025 19:46:27Reported by VulnCheckType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 45 Views🌐 WEB

Command injection in IGEL OS allows remote code execution on versions before 11.04.270

Reporter	Title	Published	Views	Family All 10
BDU FSTEC	The vulnerability of the operating system for end devices based on Linux IGEL OS, related to the failure to take measures to neutralize special elements used in the operating system’s commands, allows a perpetrator to execute arbitrary commands.	25 Nov 202500:00	–	bdu_fstec
Circl	CVE-2025-34082	30 Apr 202120:56	–	circl
CNNVD	IGEL OS 安全漏洞	3 Jul 202500:00	–	cnnvd
Cvelist	CVE-2025-34082 IGEL OS Secure Terminal and Secure Shadow Remote Code Execution	3 Jul 202519:46	–	cvelist
EUVD	EUVD-2025-19904	3 Oct 202520:07	–	euvd
Metasploit	IGEL OS Secure VNC/Terminal Command Injection RCE	1 May 202117:42	–	metasploit
NVD	CVE-2025-34082	3 Jul 202520:15	–	nvd
Positive Technologies	PT-2025-27825 · Igel · Igel Os	3 Jul 202500:00	–	ptsecurity
RedhatCVE	CVE-2025-34082	5 Jul 202520:04	–	redhatcve
Vulnrichment	CVE-2025-34082 IGEL OS Secure Terminal and Secure Shadow Remote Code Execution	3 Jul 202519:46	–	vulnrichment

Vulners

CNA

Node

igel_technology_gmbh osRange11–11.04.270linux

igel_technology_gmbh osRange10–10.06.220linux

[
  {
    "defaultStatus": "unaffected",
    "modules": [
      "Secure Terminal (telnet_ssl_connector)",
      "Secure Shadow (vnc_ssl_connector)"
    ],
    "platforms": [
      "Linux"
    ],
    "product": "OS",
    "vendor": "IGEL Technology GmbH",
    "versions": [
      {
        "lessThan": "11.04.270",
        "status": "affected",
        "version": "11",
        "versionType": "custom"
      },
      {
        "lessThan": "10.06.220",
        "status": "affected",
        "version": "10",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
vulncheck	www.vulncheck.com/advisories/igel-os-secure-terminal-shadow-rce
igel	www.igel.com/wp-content/uploads/2021/02/lxos_11.04.270.txt
kb	www.kb.igel.com/security-safety/current/isn-2021-01-igel-os-remote-command-execution-vulne
raw	www.raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/linux/misc/igel_command_injection.rb

Parameter	Position	Path	Description	CWE
PROXYCMD	path	telnet_ssl_connector	Command injection vulnerability via PROXYCMD handling in IGEL OS Secure Terminal service.	CWE-78
PROXYCMD	path	vnc_ssl_connector	Command injection vulnerability via PROXYCMD handling in IGEL OS Secure Shadow service.	CWE-78

17 Jun 2026 09:13Current

8High risk

Vulners AI Score8

CVSS 49.3

EPSS0.05277

SSVC

CWE-78