CVE-2025-52377 | Nexxt NCM-X1800 up to 1.2.7 Web Management Interface /web/um_ping_set.cgi Ping_host_text command injection

July 15, 2025 Yanac

A vulnerability was found in Nexxt NCM-X1800 up to 1.2.7. It has been classified as critical. Affected is an unknown function of the file /web/um_ping_set.cgi of the component Web Management Interface. The manipulation of the argument Ping_host_text leads to command injection.

This vulnerability is traded as CVE-2025-52377. It is possible to launch the attack remotely. Furthermore, there is an exploit available.VulDB Recent EntriesRead More