This vulnerability (CVE-2025-60963) affects the EndRun Technologies Sonoma D12 Network Time Server running firmware version 4.00. It is an OS Command Injection issue (CWE-78) that enables remote attackers to execute arbitrary commands on the device without privileges or user interaction. The impact includes potential code execution, denial of service, privilege escalation, and information disclosure. The CVSS 3.1 vector indicates network attack vector, low attack complexity, no privileges required, no user interaction, and impacts confidentiality and integrity but not availability. There are no known exploits in the wild and no patch or remediation information is currently available.

Successful exploitation can lead to arbitrary code execution, denial of service conditions, privilege escalation, and unauthorized access to sensitive information on the affected device. This compromises the confidentiality and integrity of the system but does not directly affect availability according to the CVSS vector.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict network access to the affected device and monitor for suspicious activity related to command injection attempts.