critical9.8
CVE-2025-29269
ALLNET ALL-RUT22GW v3.3.8 was discovered to contain an OS command injection vulnerability via the command parameter in the popen.cgi endpoint.
Impact
ALLNET ALL-RUT22GW v3.3.8 was discovered to contain an OS command injection vulnerability via the command parameter in the popen.cgi endpoint.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Allnet | All-Rut22gw Firmware | Version 3.3.8 |