HIGHCVSS 8.8

CVE-2025-57457

CVE-2025-57457 updated by NVD

Modified: 2026-11-06
Sources: nvd

Summary

An OS Command Injection vulnerability in the Admin panel in Curo UC300 5.42.1.7.1.63R1 allows local attackers to inject arbitrary OS Commands via the "IP Addr" parameter.

References

https://nvd.nist.gov/vuln/detail/CVE-2025-57457

Includes data from the National Vulnerability Database (NIST). NVD data is in the public domain; this page is not endorsed by NIST.

CVE® is a registered trademark of The MITRE Corporation. CVE content reproduced under the CVE Terms of Use; copyright designation © MITRE.