Skip to content
Sign in
10.0 Critical

CVE-2025-26389 A vulnerability has been identified in OZW672 (All versions < V8.0), OZW772 (All versions < V8.0)

Description

A vulnerability has been identified in OZW672 (All versions < V8.0), OZW772 (All versions < V8.0). The web service in affected devices does not sanitize the input parameters required for the `exportDiagramPage` endpoint. This could allow an unauthenticated remote attacker to execute arbitrary code with root privileges.

Affected products and versions

Product Affected versions Fixed in
OZW672 8.0 earliest → < 8.0 8.0
OZW772 8.0 earliest → < 8.0 8.0

Other CVEs of OZW672

The 3 CVEs of OZW672 →
CVE-2025-26390 A vulnerability has been identified in OZW672 (All versions < V6.0), OZW772 (All versions < V6.0) 9.8 Critical CVE-2024-36140 A vulnerability has been identified in OZW672 (All versions < V5.2), OZW772 (All versions < V5.2) 6.8 Medium
Track this CVE