What is the CVSS score of CVE-2025-69755?

CVE-2025-69755 has a CVSS 3.1 base score of 8.2 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L. EPSS exploitation probability: 0.3%.

Which versions of Neterbit NW-431F are affected by CVE-2025-69755?

Neterbit NW-431F routers (firmware vNW-431F-20241014-IR03) are exposed to unauthenticated remote code execution and data exfiltration risks.

How to fix or mitigate CVE-2025-69755?

Within 24 hours: Identify and inventory all Neterbit NW-431F routers in production, specifically those running firmware vNW-431F-20241014-IR03. Within 7 days: Implement firewall rules restricting access to the at_command.asp management interface and isolate affected devices from critical network segments pending vendor patch availability. Within 30 days: Contact Neterbit for patch status; if unavailable, evaluate firmware rollback alternatives, replacement with patchable equipment, or decommissioning of affected devices.

Neterbit NW-431F CVE-2025-69755

HIGH

OS Command Injection (CWE-78)

2026-06-04 mitre

RCE Command Injection N A

8.2

CVSS 3.1 · Vendor: mitre

Severity by source

Vendor (mitre) PRIMARY

8.2 HIGH

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L

Primary rating from Vendor (mitre) · only source for this CVE.

CVSS VectorVendor: mitre

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

None

Availability

Low

Lifecycle Timeline

Analysis Generated

Jun 04, 2026 - 18:02 vuln.today

DescriptionCVE.org

An issue in Neterbit NW-431F Router vNW-431F-20241014-IR03 allows a remote attacker to obtain sensitive information and execute arbitrary code via a crafted command to the at_command.asp interface

AnalysisAI

Remote code execution and information disclosure in Neterbit NW-431F routers (firmware vNW-431F-20241014-IR03) allow unauthenticated network attackers to compromise the device by sending a crafted command to the at_command.asp interface. The CVSS 8.2 vector (AV:N/AC:L/PR:N/UI:N) indicates trivial remote exploitation against the router's web management interface, and no public exploit identified at time of analysis, though a researcher repository on GitHub may contain proof-of-concept material.

Technical ContextAI

The Neterbit NW-431F is a consumer/SMB router that exposes a web administration interface containing an at_command.asp endpoint, typically used to issue AT modem-style commands to the underlying cellular or DSL chipset. Because the endpoint passes attacker-controlled input into a command interpreter on the router's embedded Linux firmware, this represents a classic OS command injection pattern (CWE-78 class, though CWE is not formally assigned in this advisory). The at_command interface on embedded routers is a recurring weak spot because vendors often forward parameters directly to a shell or modem control channel without sanitization, and the affected firmware build vNW-431F-20241014-IR03 is the only version explicitly referenced.

RemediationAI

No vendor-released patch identified at time of analysis; the Neterbit reference (https://neterbit.com/) points only to the vendor homepage rather than a fixed firmware build, and no vendor advisory URL is provided. Until Neterbit publishes a corrected firmware image superseding vNW-431F-20241014-IR03, operators should block all WAN-side access to the router's web management interface at the perimeter, restrict LAN-side access to the admin UI to a dedicated management VLAN or specific admin workstations, and specifically deny HTTP/HTTPS requests to the /at_command.asp path via any upstream filtering device or reverse proxy; the trade-off is loss of remote administration. Monitor the researcher repository at https://github.com/fun-beep/CVEs/tree/main/CVE-2025-69755 for technical detail and contact Neterbit support directly to request a patched firmware build, and consider replacing the device if no fix is forthcoming.