QwikSec

Security Database

CVE

CWE

Training

CVE-2025-8890

Published: Nov 27, 2025

Modified: Mar 18, 2026

PUBLISHED

Description

Firmware in SDMC NE6037 routers prior to version 7.1.12.2.44 has a network diagnostics tool vulnerable to a shell command injection attacks. In order to exploit this vulnerability, an attacker has to log in to the router's administrative portal, which by default is reachable only via LAN ports.

Vendor	Product	Versions
SDMC	NE6037	affected `0 - < 7.1.12.2.44`

Weaknesses (CWE)

References

https://cert.pl/en/posts/2025/11/CVE-2025-8890

third-party-advisory

https://www.securitum.com/cve-2025-8890.html

technical-description

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.