CVE-2025-56498

{
  "id": "CVE-2025-56498",
  "sourceIdentifier": "[email protected]",
  "published": "2025-09-03T16:15:40.193",
  "lastModified": "2026-11-07T18:10:00.200",
  "vulnStatus": "Analyzed",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "An OS command injection vulnerability exists in PLDT WiFi Router's Prolink PGN6401V Firmware 8.1.2 web management interface. The ping6.asp page submits user input to the /boaform/formPing6 endpoint via the pingAddr parameter, which is not properly sanitized. An authenticated attacker can exploit this flaw by injecting arbitrary system commands, which are executed by the underlying operating system with root privileges. The router uses the Boa web server (version 0.93.15) to handle the request. Successful exploitation can lead to full system compromise and unauthorized control of the network device."
    },
    {
      "lang": "es",
      "value": "Existe una vulnerabilidad de inyección de comandos del sistema operativo en la interfaz de gestión web del firmware 8.1.2 de Prolink PGN6401V del router WiFi PLDT. La página ping6.asp envía la entrada del usuario al endpoint /boaform/formPing6 a través del parámetro pingAddr, que no se sanea correctamente. Un atacante autenticado puede explotar esta falla inyectando comandos de sistema arbitrarios, que son ejecutados por el sistema operativo subyacente con privilegios de root. El router utiliza el servidor web Boa (versión 0.93.15) para manejar la solicitud. La explotación exitosa puede llevar a un compromiso total del sistema y a un control no autorizado del dispositivo de red."
    }
  ],
  "affected": [
    {
      "source": "[email protected]",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "version": "n/a",
              "status": "affected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {
    "cvssMetricV31": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type": "Secondary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
          "baseScore": 5.3,
          "baseSeverity": "MEDIUM",
          "attackVector": "NETWORK",
          "attackComplexity": "LOW",
          "privilegesRequired": "NONE",
          "userInteraction": "NONE",
          "scope": "UNCHANGED",
          "confidentialityImpact": "NONE",
          "integrityImpact": "LOW",
          "availabilityImpact": "NONE"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 1.4
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "timestamp": "2025-09-03T20:01:33.019752Z",
          "id": "CVE-2025-56498",
          "options": [
            {
              "exploitation": "poc"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "role": "CISA Coordinator",
          "version": "2.0.3"
        }
      }
    ]
  },
  "weaknesses": [
    {
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "type": "Secondary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-78"
        }
      ]
    }
  ],
  "configurations": [
    {
      "operator": "AND",
      "nodes": [
        {
          "operator": "OR",
          "negate": false,
          "cpeMatch": [
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:o:prolink2u:pgn6401v_firmware:*:*:*:*:*:*:*:*",
              "versionEndIncluding": "8.1.2",
              "matchCriteriaId": "49A20746-3F84-4D44-8947-3E2CA43E0BCA"
            }
          ]
        },
        {
          "operator": "OR",
          "negate": false,
          "cpeMatch": [
            {
              "vulnerable": false,
              "criteria": "cpe:2.3:h:prolink2u:pgn6401v:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "E1580878-C7D7-47AC-BFA3-2B90035F38D4"
            }
          ]
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://github.com/Jorge2Rubio/CVEs/blob/main/CVE-2025-56498.md",
      "source": "[email protected]",
      "tags": [
        "Exploit",
        "Third Party Advisory"
      ]
    },
    {
      "url": "https://prolink2u.com/products/pgn6401v",
      "source": "[email protected]",
      "tags": [
        "Product"
      ]
    }
  ]
}