OS Command Injection Vulnerability in Neterbit NW-431F Router
CVE-2025-67447

9.8CRITICAL

Key Information:

Vendor

Neterbit

Status
Neterbit NW-431F Router
Vendor
CVE Published:
4 June 2026

What is CVE-2025-67447?

The Neterbit NW-431F Router has a vulnerability in its network diagnosis module, specifically in the ping functionality. This flaw allows unauthorized users to inject arbitrary OS commands through the IP address input field, which are then executed with the privileges of the web server. This could lead to severe security breaches as attackers can gain control over the affected systems. Proper input sanitization measures are essential to mitigate this risk.

References

https://neterbit.com/
https://github.com/fun-beep/CVEs/tree/main/CVE-2025-67447

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.