CVE-2025-43953

In 2wcom IP-4c 2.16, the web interface allows admin and manager users to execute arbitrary code as root via a ping or traceroute field on the TCP/IP screen...

CVE-2025-43953

The 2wcom IP-4c audio codec device (version 2.16 ) contains a vulnerability where the web interface allows admin and manager users to execute arbitrary code as root . The root cause is the improper neutralization of special elements used in a command, specifically within the ping or traceroute fi...