CVE-2025-53508
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2025-53508
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Multiple products provided by iND Co.,Ltd contain an OS command injection vulnerability. If exploited, an arbitrary OS command may be executed and sensitive information may be obtained. As for the details of affected product names and versions, refer to the information under [Product Status].
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
OS命令中使用的特殊元素转义处理不恰当(OS命令注入)
Source: NVD (National Vulnerability Database)
Vulnerability Title
iND多款产品 操作系统命令注入漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
iND HL330-DLS和iND LM-100都是日本iND公司的一款嵌入式硬件终端。 iND多款产品存在操作系统命令注入漏洞，该漏洞源于OS命令注入，可能导致执行任意命令或获取敏感信息。以下产品受到影响：HL330-DLS、LM-100、LM-200 和L2X Assist-RS-A。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| iND Co.,Ltd | HL330-DLS (for module MC7700) | firmware version 1.03 and earlier | - | |
| iND Co.,Ltd | HL330-DLS (for module MC7330) | firmware version 2.02t and earlier | - | |
| iND Co.,Ltd | HL320-DLS (for module MC7700) | firmware version 1.03 and earlier | - | |
| iND Co.,Ltd | HL320-DLS (for module MC7330) | firmware version 2.02t and earlier | - | |
| iND Co.,Ltd | LM-100 | firmware version 1.02 and earlier | - | |
| iND Co.,Ltd | LM-200 (for module AMP570) | firmware version 1.02 and earlier | - | |
| iND Co.,Ltd | LM-200 (for module EC25-J) | firmware version 1.05e and earlier | - | |
| iND Co.,Ltd | L2X Assist | firmware version 2.01 and earlier | - | |
| iND Co.,Ltd | L2X Assist-RS-A | firmware version 1.11 and earlier | - | |
| iND Co.,Ltd | L2X Assist-RS-E | firmware version 1.12 and earlier | - | |
| iND Co.,Ltd | F2L Assist-SS-A | firmware version 1.03 and earlier | - | |
| iND Co.,Ltd | F2L Assist-SS-E | firmware version 1.01 and earlier | - |
II. Public POCs for CVE-2025-53508
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2025-53508
请登录查看更多情报信息。
IV. Related Vulnerabilities
Same product: HL330-DLS (for module MC7700)
Same vendor: iND Co.,Ltd
Same weakness: CWE-78
- CVE-2026-8273
D-Link DNS-320 system_mgr.cgi cgi_merge_user os command inje - CVE-2026-8272
D-Link DNS-320 webfile_mgr.cgi chown os command injection - CVE-2026-8271
D-Link DNS-320 network_mgr.cgi cgi_upnp_edit os command inje - CVE-2026-8265
Tenda AC6 httpd getLogFile get_log_file os command injection - CVE-2026-8264
Tenda AC6 httpd WifiApScan formWifiApScan os command injecti
V. Comments for CVE-2025-53508
No comments yet