CVE-2025-57201 identifies an authenticated command injection vulnerability in the SMB server function of AVTECH SECURITY Corporation DGM1104 FullImg-1015-1004-1006-1003. An attacker with authentication privileges can exploit this flaw by sending crafted input to execute arbitrary commands on the affected device. The vulnerability is classified under CWE-77 (Improper Neutralization of Special Elements used in a Command). The CVSS v3.1 base score is 8.8, reflecting network attack vector, low attack complexity, required privileges, no user interaction, and high impact on confidentiality, integrity, and availability. No vendor advisory or patch information is provided, and no known exploits have been reported.

Successful exploitation allows an authenticated attacker to execute arbitrary commands on the affected device, potentially leading to full compromise of confidentiality, integrity, and availability of the system. This can result in unauthorized control, data manipulation, or denial of service.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a patch is available, restrict access to the SMB server function to trusted users only and monitor for suspicious authenticated activity. Follow vendor communications for updates on fixes or mitigations.