What’s Vulnerable › Vulnerabilities

CVE-2025-13799: ADSLR NBR1005GPEV2 send_order.cgi ap_macfilter_del command injection

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 9.4% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2025-12-01 · updated 2026-10-18
• Weakness: CWE-74

Description

A vulnerability has been found in ADSLR NBR1005GPEV2 250814-r037c. This vulnerability affects the function ap_macfilter_del of the file /send_order.cgi. The manipulation of the argument mac leads to command injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Affected products

• ADSLR B-QE2W401: through 250814-r037c

References

• https://vuldb.com/?ctiid.333810
• https://vuldb.com/?id.333810
• https://vuldb.com/?submit.691842
• https://www.notion.so/2a60c75766a8801e8e4bdd3be8072d9d

Get alerted when CVE-2025-13799 or the next vulnerability affects your stack