CyberAlerts is shutting down on June 30th, 2025. Thank you for your support!
CVE-2025-25504: An issue in the /usr/local/bin/jncs.sh script of Gefen WebFWC (In AV over IP products) v1.85h, v1.86v, and v1.70 allows attackers with network...
6.5
CVSS
Description
An issue in the /usr/local/bin/jncs.sh script of Gefen WebFWC (In AV over IP products) v1.85h, v1.86v, and v1.70 allows attackers with network access to connect to the device over TCP port 4444 without authentication and execute arbitrary commands with root privileges.
Classification
CVE ID: CVE-2025-25504
CVSS Base Severity: MEDIUM
CVSS Base Score: 6.5
CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Affected Products
Vendor: n/a
Product: n/a
Exploit Prediction Scoring System (EPSS)
EPSS Score: 0.1% (probability of being exploited)
EPSS Percentile: 27.97% (scored less or equal to compared to others)
EPSS Date: 2025-06-03 (when was this score calculated)
References
https://nvd.nist.gov/vuln/detail/CVE-2025-25504http://gefen.com
https://www.troy-wilson.com/cve-2025-25504.html