Critical
Low
Medium

CVE-2025-1036

Alias:

Overview

Command injection vulnerability exists in the “Logging” page of the web-based configuration utility. An authenticated user with low privileged network access for the configuration utility can execute arbitrary commands on the underlying OS to obtain root SSH access to the TropOS 4th Gen device.

Critical
Low
Medium
No items found.

Severity / CVSS Score:  (Critical)

CWE:

Discovery date: October 28, 2025

Authentication required: NoneYes

Attack Vector: None

Affected Components

Kodem Deep Dive

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo
Get a personalized demo