NetSight
high8.8

CVE-2025-11787

Command injection vulnerability in the operating system in Circutor SGE-PLC1000/SGE-PLC50 v9.0.2 through the 'GetDNS()', 'CheckPing()' and 'TraceRoute()' funct…

Impact

Command injection vulnerability in the operating system in Circutor SGE-PLC1000/SGE-PLC50 v9.0.2 through the 'GetDNS()', 'CheckPing()' and 'TraceRoute()' functions.

Affected products

VendorProductAffected versions
CircutorSge-Plc1000 Firmware
Version 9.0.2
CircutorSge-Plc50 Firmware
Version 9.0.2

Weakness classification

References