CVE-2025-26389

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-26389
A vulnerability has been identified in OZW672 (All versions < V8.0), OZW772 (All versions < V8.0). The web service in affected devices does not sanitize the input parameters required for the `exportDiagramPage` endpoint. This could allow an unauthenticated remote attacker to execute arbitrary code with root privileges.

10.0 /10

CVSS v3 : CRITICAL

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 6.0

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope CHANGED

References
Link Resource
https://cert-portal.siemens.com/productcert/html/ssa-047424.html Vendor Advisory
Configurations

Configuration 1 (hide)

AND
OR cpe:2.3:o:siemens:ozw672_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:siemens:ozw672_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:siemens:ozw672:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
OR cpe:2.3:o:siemens:ozw772_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:siemens:ozw772_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:siemens:ozw772:-:*:*:*:*:*:*:*
History

03 Oct 2025, 20:39

Type Values Removed Values Added
Summary
  • (es) Se ha identificado una vulnerabilidad en OZW672 (todas las versiones anteriores a V8.0) y OZW772 (todas las versiones anteriores a V8.0). El servicio web de los dispositivos afectados no depura los parámetros de entrada necesarios para el endpoint `exportDiagramPage`. Esto podría permitir que un atacante remoto no autenticado ejecute código arbitrario con privilegios de root.
First Time Siemens ozw672
Siemens
Siemens ozw772
Siemens ozw772 Firmware
Siemens ozw672 Firmware
CPE cpe:2.3:o:siemens:ozw772_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:siemens:ozw672:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:ozw772:-:*:*:*:*:*:*:*
cpe:2.3:o:siemens:ozw672_firmware:*:*:*:*:*:*:*:*
References () https://cert-portal.siemens.com/productcert/html/ssa-047424.html - () https://cert-portal.siemens.com/productcert/html/ssa-047424.html - Vendor Advisory

13 May 2025, 10:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-05-13 10:15

Updated : 2025-10-03 20:39

NVD link : CVE-2025-26389

Mitre link : CVE-2025-26389

CVE.ORG link : CVE-2025-26389

JSON object : View

Products Affected

siemens

  • ozw672_firmware
  • ozw772_firmware
  • ozw672
  • ozw772
CWE
CWE-78

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')