A vulnerability was detected in ADSLR B-QE2W401 250814-r037c. Affected by this issue is the function parameterdel_swifimac of the file /send_order.cgi. Performing manipulation of the argument del_swifimac results in command injection. The attack is possible to be carried out remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
References
| Link | Resource |
|---|---|
| https://vuldb.com/?ctiid.333808 | Permissions Required VDB Entry |
| https://vuldb.com/?id.333808 | Third Party Advisory VDB Entry |
| https://vuldb.com/?submit.691838 | Third Party Advisory VDB Entry |
| https://www.notion.so/2a60c75766a88027a6aec07b378332a8 | Exploit Third Party Advisory |
| https://www.notion.so/report-7-2a60c75766a88027a6aec07b378332a8 | Exploit Third Party Advisory |
Configurations
Configuration 1 (hide)
| AND |
|
History
11 Dec 2025, 23:06
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://vuldb.com/?ctiid.333808 - Permissions Required, VDB Entry | |
| References | () https://vuldb.com/?id.333808 - Third Party Advisory, VDB Entry | |
| References | () https://vuldb.com/?submit.691838 - Third Party Advisory, VDB Entry | |
| References | () https://www.notion.so/2a60c75766a88027a6aec07b378332a8 - Exploit, Third Party Advisory | |
| References | () https://www.notion.so/report-7-2a60c75766a88027a6aec07b378332a8 - Exploit, Third Party Advisory | |
| First Time |
Adslr b-qe2w401
Adslr Adslr b-qe2w401 Firmware |
|
| CPE | cpe:2.3:h:adslr:b-qe2w401:-:*:*:*:*:*:*:* cpe:2.3:o:adslr:b-qe2w401_firmware:*:*:*:*:*:*:*:* |
01 Dec 2025, 15:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
01 Dec 2025, 01:16
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-12-01 01:16
Updated : 2025-12-11 23:06
NVD link : CVE-2025-13797
Mitre link : CVE-2025-13797
CVE.ORG link : CVE-2025-13797
JSON object : View
Products Affected
adslr
- b-qe2w401_firmware
- b-qe2w401