Threats tagged 'ghsa-v3mp-h9f4-c7mf'

The 3onedata Modbus gateway device model GW1101-1D(RS-485)-TB-P with hardware version V2.2.0 contains a vulnerability that allows authenticated users to execute arbitrary shell commands as the root user by injecting payloads into the "IP address" field of the diagnostic test tools. This critical vulnerability is identified as CVE-2025-13605 and has a CVSS 4.0 score of 9.3. The issue has been resolved in firmware version 3.0.59B2024080600R4353.