CVE-2025-50753

high

Description

Mitrastar GPT-2741GNAC-N2 devices are provided with access through ssh into a restricted default shell.The command "deviceinfo show file" is supposed to be used from restricted shell to show files and directories. By providing " /bin/sh" (quotes included) to the argument of this command will drop a root shell.

References

https://gist.github.com/geraldog/2d07fdedbbb79d822e9df4b75f882a63

http://mitrastar.com

http://gpt-2741gnac-n2.com

Details

Source: Mitre, NVD

Published: 2025-08-26

Updated: 2025-08-27

Risk Information

CVSS v2

Base Score: 7.2

Vector: CVSS2#AV:L/AC:L/Au:N/C:C/I:C/A:C

Severity: High

CVSS v3

Base Score: 8.4

Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Severity: High

EPSS

EPSS: 0.00017