CVE-2025-48890

🗓️ 24 Jun 2025 04:37:32Reported by jpcertType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 24 Views

OS command injection vulnerability in miniigd SOAP service allows remote attackers to execute commands.

Reporter	Title	Published	Views	Family All 11
BDU FSTEC	The vulnerability of the miniIGD component of the SOAP microprogramming system for routers WRH-733GBK and WRH-733GWH allows a hacker to execute arbitrary code.	24 Sep 202500:00	–	bdu_fstec
Circl	CVE-2025-48890	24 Jun 202505:32	–	circl
CNNVD	Elecom WRH-733GBK和Elecom WRH-733GWH 操作系统命令注入漏洞	24 Jun 202500:00	–	cnnvd
Cvelist	CVE-2025-48890	24 Jun 202504:37	–	cvelist
EUVD	EUVD-2025-18996	3 Oct 202520:07	–	euvd
Japan Vulnerability Notes	JVN#39435597: Multiple vulnerabilities in ELECOM wireless LAN routers	24 Jun 202500:00	–	jvn
Japan Vulnerability Notes	Multiple vulnerabilities in ELECOM wireless LAN routers	24 Jun 202505:50	–	jvn
NVD	CVE-2025-48890	24 Jun 202505:15	–	nvd
Positive Technologies	PT-2025-26696 · Unknown · Wrh-733Gbk +1	24 Jun 202500:00	–	ptsecurity
RedhatCVE	CVE-2025-48890	26 Jun 202505:19	–	redhatcve

[
  {
    "vendor": "ELECOM CO.,LTD.",
    "product": "WRH-733GBK",
    "versions": [
      {
        "version": "all versions",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "ELECOM CO.,LTD.",
    "product": "WRH-733GWH",
    "versions": [
      {
        "version": "all versions",
        "status": "affected"
      }
    ]
  }
]

Source	Link
elecom	www.elecom.co.jp/news/security/20250624-02/
jvn	www.jvn.jp/en/jp/JVN39435597/

17 Jun 2026 09:30Current

7.4High risk

Vulners AI Score7.4

CVSS 49.3

CVSS 39.8

EPSS0.02628

SSVC

CWE-78