Is there a public PoC exploit available for EUVD-2025-199945?

Yes, a public proof-of-concept exploit is available for EUVD-2025-199945. Prioritise patching immediately. EPSS: 0.4%.

ADSLR NBR1005GPEV2 EUVD-2025-199945

Q: What is the CVSS score of EUVD-2025-199945?

EUVD-2025-199945 has a CVSS 4.0 base score of 2.1 (Low). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.4%.

| CVE-2025-13800 LOW

Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') (CWE-74)

2025-12-01 cna@vuldb.com

Command Injection B Qe2w401 Firmware Adslr

2.1

CVSS 4.0 · Vendor: vuldb

Severity by source

Vendor (vuldb) PRIMARY

2.1 LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

vuln.today AI

6.3 MEDIUM

Network-accessible, low privileges, no user interaction, and limited impact on CIA.

3.1 AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

4.0 AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N

Primary rating from Vendor (vuldb).

CVSS VectorVendor: vuldb

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Lifecycle Timeline

Severity Changed

Apr 29, 2026 - 01:11 NVD

MEDIUM LOW

CVSS changed

Apr 29, 2026 - 01:11 NVD

6.3 (MEDIUM) 2.1 (LOW)

EUVD ID Assigned

Mar 15, 2026 - 13:34 euvd

EUVD-2025-199945

Analysis Generated

Mar 15, 2026 - 13:34 vuln.today

PoC Detected

Dec 11, 2025 - 22:19 vuln.today

Public exploit code

CVE Published

Dec 01, 2025 - 02:15 nvd

MEDIUM 6.3

CVE Published

Dec 01, 2025 - 02:15 cve.org

LOW 2.1

DescriptionCVE.org

A vulnerability was found in ADSLR NBR1005GPEV2 250814-r037c. This issue affects the function set_mesh_disconnect of the file /send_order.cgi. The manipulation of the argument mac results in command injection. It is possible to launch the attack remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.

AnalysisAI

Authenticated command injection in ADSLR NBR1005GPEV2 router firmware 250814-r037c allows remote attackers with low privileges to execute arbitrary OS commands via the mac parameter in /send_order.cgi. Exploit code is publicly available, though no active exploitation has been reported. The vulnerability scores only 2.1 in CVSS 4.0 due to limited impact.

Technical ContextAI

The /send_order.cgi endpoint of the router's web interface contains a set_mesh_disconnect function that passes user-supplied data from the 'mac' parameter directly to a shell command without sanitization, constituting an OS command injection (CWE-74). The affected firmware is ADSLR NBR1005GPEV2 version 250814-r037c, listed under CPE cpe:2.3:o:adslr:b-qe2w401_firmware:*.

RemediationAI

No vendor-released patch exists; ADSLR did not respond to early disclosure. As a compensating control, restrict network access to the router's management interface, blocking untrusted sources from reaching /send_order.cgi. If feasible, disable the mesh disconnect feature entirely. Consider replacing the device with a supported alternative, as the lack of vendor response indicates no future patches will be forthcoming.