CVE-2025-3705

A physical attacker with no privileges can gain full control of the affected device due to improper neutralization of special elements used in an OS Command 'OS Command Injection' when loading a config file from a USB drive...

CVE-2025-3705

creationtimestamp| type| source ---|---|--- 2025-07-07 10:00:22+00:00| seen| https://infosec.exchange/users/certvde/statuses/114811366375846832 2025-07-07 10:01:38+00:00| seen| https://bsky.app/profile/certvde.infosec.exchange.ap.brid.gy/post/3ltejp326l5t2 2025-07-07 11:39:07+00:00| seen|...