CVE-2025-26412
BaseFortify
Publication date: 2025-06-11
Last updated on: 2025-06-18
Assigner: SEC Consult Vulnerability Lab
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-912 | The product contains functionality that is not documented, not part of the specification, and not accessible through an interface or command sequence that is obvious to the product's users or administrators. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
The vulnerability involves the SIMCom SIM7600G modem supporting an undocumented AT command that allows an attacker to execute system commands with root permissions on the modem. To exploit this, an attacker must have either physical access to the device or remote shell access to a device that communicates directly with the modem using AT commands.
How can this vulnerability impact me? :
This vulnerability can allow an attacker with physical or remote shell access to execute commands with root privileges on the modem, potentially leading to full control over the modem's system. This could result in unauthorized actions, data compromise, or disruption of device functionality.