CVE-2025-34082: CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in IGEL Technology GmbH OS
A command injection vulnerability exists in IGEL OS versions prior to 11.04.270 within the Secure Terminal and Secure Shadow services. The flaw arises due to improper input sanitization in the handling of specially crafted PROXYCMD commands on TCP ports 30022 and 5900. An unauthenticated attacker with network access to a vulnerable device can inject arbitrary commands, leading to remote code execution with elevated privileges. NOTE: IGEL OS v10.x has reached end-of-life (EOL) status.
AI Analysis
Technical Summary
This vulnerability (CVE-2025-34082) involves improper neutralization of special elements in OS commands (CWE-78) within IGEL OS prior to version 11.04.270. Specifically, the Secure Terminal and Secure Shadow services improperly handle PROXYCMD commands on TCP ports 30022 and 5900, allowing unauthenticated remote attackers to inject arbitrary OS commands. This results in remote code execution with elevated privileges. The vulnerability has a CVSS 4.0 base score of 9.3, indicating critical severity. IGEL OS 10.x is also affected but is end-of-life. No patch or vendor advisory details are currently available.
Potential Impact
Successful exploitation allows unauthenticated remote attackers to execute arbitrary commands on affected IGEL OS devices with elevated privileges. This can lead to full system compromise. The vulnerability affects network-exposed services on TCP ports 30022 and 5900. The critical CVSS score reflects the high impact on confidentiality, integrity, and availability.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users should monitor IGEL Technology GmbH advisories closely. Until a fix is available, restricting network access to TCP ports 30022 and 5900 from untrusted sources may reduce exposure.
CVE-2025-34082: CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in IGEL Technology GmbH OS
Description
A command injection vulnerability exists in IGEL OS versions prior to 11.04.270 within the Secure Terminal and Secure Shadow services. The flaw arises due to improper input sanitization in the handling of specially crafted PROXYCMD commands on TCP ports 30022 and 5900. An unauthenticated attacker with network access to a vulnerable device can inject arbitrary commands, leading to remote code execution with elevated privileges. NOTE: IGEL OS v10.x has reached end-of-life (EOL) status.
CVSS v4.0
Score 9.3critical
Affected software
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This vulnerability (CVE-2025-34082) involves improper neutralization of special elements in OS commands (CWE-78) within IGEL OS prior to version 11.04.270. Specifically, the Secure Terminal and Secure Shadow services improperly handle PROXYCMD commands on TCP ports 30022 and 5900, allowing unauthenticated remote attackers to inject arbitrary OS commands. This results in remote code execution with elevated privileges. The vulnerability has a CVSS 4.0 base score of 9.3, indicating critical severity. IGEL OS 10.x is also affected but is end-of-life. No patch or vendor advisory details are currently available.
Potential Impact
Successful exploitation allows unauthenticated remote attackers to execute arbitrary commands on affected IGEL OS devices with elevated privileges. This can lead to full system compromise. The vulnerability affects network-exposed services on TCP ports 30022 and 5900. The critical CVSS score reflects the high impact on confidentiality, integrity, and availability.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users should monitor IGEL Technology GmbH advisories closely. Until a fix is available, restricting network access to TCP ports 30022 and 5900 from untrusted sources may reduce exposure.
Technical Details
- Data Version
- 5.1
- Assigner Short Name
- VulnCheck
- Date Reserved
- 2025-04-15T19:15:22.551Z
- Cvss Version
- 4.0
- State
- PUBLISHED
Threat ID: 6866dff66f40f0eb729b623e
Added to database: 07/03/2025, 19:54:30 UTC
Last enriched: 05/14/2026, 01:53:57 UTC
Last updated: 07/26/2026, 08:51:59 UTC
Views: 176
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.