Command Injection Vulnerability in WWH Servers by Vendor

CVE-2025-41663

What is CVE-2025-41663?

An unauthenticated remote attacker positioned to intercept communications can exploit this vulnerability by injecting arbitrary commands into the responses from WWH servers. This enables the attacker to execute commands with elevated privileges, potentially compromising the server's integrity and security. Organizations using these servers are urged to review their security measures to mitigate the risk associated with this vulnerability.

References