CVE-2025-66848
Unknown
Unknown - Not Provided
Unauthorized Remote Command Execution in JD Cloud NAS Routers
Publication date: 2025-12-30
Last updated on: 2025-12-30
Assigner: MITRE
Description
Description
JD Cloud NAS routers AX1800 (4.3.1.r4308 and earlier), AX3000 (4.3.1.r4318 and earlier), AX6600 (4.5.1.r4533 and earlier), BE6500 (4.4.1.r4308 and earlier), ER1 (4.5.1.r4518 and earlier), and ER2 (4.5.1.r4518 and earlier) contain an unauthorized remote command execution vulnerability.
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| jd_cloud | nas_router | 4.5.1.r4518 |
| jd_cloud | nas_router | 4.3.1.r4318 |
| jd_cloud | nas_router | 4.4.1.r4308 |
| jd_cloud | nas_router | 4.3.1.r4308 |
| jd_cloud | nas_router | 4.5.1.r4533 |
Helpful Resources
Exploitability
CWE
KEV
| CWE ID | Description |
|---|---|
| CWE-UNKNOWN |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability is an unauthorized remote command execution flaw found in certain JD Cloud NAS router models and firmware versions. It allows an attacker to execute commands on the affected device remotely without authorization.
How can this vulnerability impact me? :
An attacker exploiting this vulnerability could gain unauthorized control over the affected NAS router, potentially leading to device compromise, data theft, disruption of network services, or further attacks within the network.
Ask Our AI Assistant
Need more information? Ask your question to get an AI reply (Powered by our expertise)
0/70