CVE-2025-60963
Unknown Unknown - Not Provided
BaseFortify

Publication date: 2025-10-06

Last updated on: 2025-10-10

Assigner: MITRE

Description
OS Command Injection vulnerability in EndRun Technologies Sonoma D12 Network Time Server (GPS) F/W 6010-0071-000 Ver 4.00 allows attackers to execute arbitrary code, cause a denial of service, gain escalated privileges, and gain sensitive information.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2025-10-06
Last Modified
2025-10-10
Generated
2026-06-16
AI Q&A
2025-10-06
EPSS Evaluated
2026-06-15
NVD
CVE-2025-60963
EUVD
EUVD-2025-32136
Affected Vendors & Products
Showing 2 associated CPEs
Vendor Product Version / Range
endruntechnologies sonoma_d12_firmware 6010-0071-000
endruntechnologies sonoma_d12 4.00
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-78 The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Executive Summary

This vulnerability is an OS Command Injection in the EndRun Technologies Sonoma D12 Network Time Server firmware version 4.00. It allows attackers to execute arbitrary code on the device, potentially leading to unauthorized actions.

Impact Analysis

The vulnerability can impact you by allowing attackers to execute arbitrary code, cause denial of service, escalate privileges, and gain access to sensitive information on the affected device.

Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2025-60963. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart