RCE in Diviotec Nbf232p
CVE-2025-5113
The Diviotec professional series exposes a web interface. One endpoint is vulnerable to arbitrary command injection and hardcoded passwords are used.
Vulnerability class: Command Injection (OS Command Injection)
Published · last modified .
EPSS exploit prediction
EPSS: 0.092 (95.2th percentile), scored .
Low probability of exploitation in the next 30 days, but still tracked. 95th percentile — 95.2% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.092 · newest: 0.092 · change: 0.000
Affected products
- Diviotec Nbf232p — versions 0
- Diviotec Nbf233p — versions 0
- Diviotec Nbr222p — versions 0
- Diviotec Nbr222pv — versions 0
- Diviotec Nbr224p — versions 0
- Diviotec Nbr225p — versions 0
- Diviotec Nbr226p — versions 0
- Diviotec Ndr252p — versions 0
- Diviotec Ndr255p — versions 0
Weakness classification (CWE)
References
- www.onekey.com/resource/security-advisory-remote-code-execution-on-diviotec-ip-… (third-party-advisory)