Cross-Site Request Forgery Vulnerability in Main Web Interface of Vendor Product

CVE-2025-41661

What is CVE-2025-41661?

A vulnerability in the Main Web Interface allows unauthenticated remote attackers to execute arbitrary commands with root privileges on affected devices. This security flaw arises from a lack of proper Cross-Site Request Forgery (CSRF) protection in the endpoint event_mail_test, enabling attackers to initiate unauthorized actions without user consent.

References