What’s Vulnerable › Vulnerabilities
CVE-2025-25504
- Severity: medium (CVSS 6.5 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.4% probability of exploitation in the next 30 days
- Public exploit or detection template: yes
- Published: 2025-05-05 · updated 2026-07-05
- Weakness: CWE-77
Description
An issue in the /usr/local/bin/jncs.sh script of Gefen WebFWC (In AV over IP products) v1.85h, v1.86v, and v1.70 allows attackers with network access to connect to the device over TCP port 4444 without authentication and execute arbitrary commands with root privileges.
Affected products
- Niceforyou Gefen Webfwc: 1.70v, 1.85h, 1.86v
References
Get alerted when CVE-2025-25504 or the next vulnerability affects your stack