← Database

CVE-2025-26389

CRITICAL CVSS: 10.0 Published: 2025-05-13 Modified: 2026-06-17

Description

A vulnerability has been identified in OZW672 (All versions < V8.0), OZW772 (All versions < V8.0). The web service in affected devices does not sanitize the input parameters required for the `exportDiagramPage` endpoint. This could allow an unauthenticated remote attacker to execute arbitrary code with root privileges.

Affected Platforms

Siemens Ozw772 FirmwareSiemens Ozw672Siemens Ozw672 FirmwareSiemens Ozw772

Weakness Type

CWE-78

References