CVE-2025-53508

Severity: high (CVSS 8.6 v4.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2025-08-29 · updated 2026-06-17
Weakness: CWE-78

Description

Multiple products provided by iND Co.,Ltd contain an OS command injection vulnerability. If exploited, an arbitrary OS command may be executed and sensitive information may be obtained. As for the details of affected product names and versions, refer to the information under [Product Status].

Affected products

iND Co.,Ltd F2L Assist-SS-A: through firmware version 1.03
iND Co.,Ltd F2L Assist-SS-E: through firmware version 1.01
iND Co.,Ltd HL320-DLS (for module MC7330): through firmware version 2.02t
iND Co.,Ltd HL320-DLS (for module MC7700): through firmware version 1.03
iND Co.,Ltd HL330-DLS (for module MC7330): through firmware version 2.02t
iND Co.,Ltd HL330-DLS (for module MC7700): through firmware version 1.03
iND Co.,Ltd L2X Assist: through firmware version 2.01
iND Co.,Ltd L2X Assist-RS-A: through firmware version 1.11
iND Co.,Ltd L2X Assist-RS-E: through firmware version 1.12
iND Co.,Ltd LM-100: through firmware version 1.02
iND Co.,Ltd LM-200 (for module AMP570): through firmware version 1.02
iND Co.,Ltd LM-200 (for module EC25-J): through firmware version 1.05e

References

Get alerted when CVE-2025-53508 or the next vulnerability affects your stack