Products
Government
Resources
Community
Company
Partners
Sign In / Join
Sign In
Advisories
WePresent WiPG-1000 Unauthenticated Command Injection in via rdfs.cgi
Go Back
severity
critical
date
July 14, 2025
Affecting
WePresent WiPG-1000 firmware < 2.2.3.0
CVE
CVE-2025-34103
CVE type
OS Command Injection
CVSS
9.3
CVSS V4 Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
References
Researcher Disclosure
Metasploit Module
EDB-41935
Credit
Matthias Brun of Redguard