CVE-2025-22906

CVE-2025-22906 affects RE11S v1.11, where the L2TPUserName parameter at /goform/setWAN enables a command-injection vulnerability. CVSS 3.1 base score 9.8 (NETWORK, LOW attack complexity, NO user interaction, NONE privileges). The issue is documented with a vendor/product context (RE11S v1.11) and...

CVE-2025-22906

RE11S v1.11 was discovered to contain a command injection vulnerability via the L2TPUserName parameter at /goform/setWAN...

CVE-2025-22906

RE11S v1.11 was discovered to contain a command injection vulnerability via the L2TPUserName parameter at /goform/setWAN...