OZW672 OZW772 Code Execution

The vulnerability of web servers OZW672 and OZW772 is related to the failure to take measures to neutralize special elements used in the command when processing the exportDiagramPage parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary code with root privileges...

CVE-2025-26389: Improper Neutralization of Special Elements used in an OS Command

A vulnerability has been identified in OZW672 All versions V8.0, OZW772 All versions V8.0. The web service in affected devices does not sanitize the input parameters required for the exportDiagramPage endpoint. This could allow an unauthenticated remote attacker to execute arbitrary code with roo...