CVE-2025-48415

6.2 mediumEPSS 0.2%

Medium (6.2). EPSS 0.2% chance of exploitation in the next 30 days.

A USB backdoor feature can be triggered by attaching a USB drive that contains specially crafted "salia.ini" files. The .ini file can contain several "commands" that could be exploited by an attacker to export or modify the device configuration, enable an SSH backdoor or perform other administrative actions. Ultimately, this backdoor also allows arbitrary execution of OS commands.

Severity

CVSS 3.1

6.2 medium

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

EPSS: 0.2% chance of exploitation in the next 30 days; higher than 12% of CVEs (scores of 2026-10-31)
CWE: CWE-749
Published: 2025-05-21
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

References

https://r.sec-consult.com/echarge
http://seclists.org/fulldisclosure/2025/May/23

Check your stack JSON