Arbitrary Command Injection Vulnerability in Netcom NTC 6200 and NWL 222 Series

CVE-2025-4010

What is CVE-2025-4010?

The Netcom NTC 6200 and NWL 222 series have critical weaknesses in their web interface configuration, allowing remote authenticated attackers to perform arbitrary command injection. Additionally, the use of insecure hardcoded passwords further exacerbates the risk, enabling attackers to execute arbitrary code with elevated privileges. It is crucial for operators to assess their security posture and update their systems to mitigate these vulnerabilities.

References